{"id":3838,"date":"2015-04-27T07:34:35","date_gmt":"2015-04-27T10:34:35","guid":{"rendered":"http:\/\/www.viazap.com.br\/?p=3838"},"modified":"2015-04-27T07:34:35","modified_gmt":"2015-04-27T10:34:35","slug":"implementing-delegated-administration","status":"publish","type":"post","link":"https:\/\/blog.clusterweb.com.br\/?p=3838","title":{"rendered":"Implementing Delegated Administration"},"content":{"rendered":"<p>Below are the guidelines to manage the distribution list through CLI.<\/p>\n<h2><span id=\"Create_domain\" class=\"mw-headline\">Create domain<\/span><\/h2>\n<pre>   $ zmprov cd domain.com zimbraAuthMech zimbra\r\n<\/pre>\n<h2><span id=\"Create_the_delegated_admin\" class=\"mw-headline\">Create the delegated admin<\/span><\/h2>\n<pre>   $ zmprov ca  delegatedadmin@example.com &lt;passwd&gt;  zimbraIsDelegatedAdminAccount TRUE\r\n<\/pre>\n<p><!--more--><\/p>\n<h2><span id=\"Admin_views\" class=\"mw-headline\">Admin views<\/span><\/h2>\n<p>Below are list of Admin view&#8217;s available which can be assigned to delegated admin.<\/p>\n<pre>Account List View          \u00a0:\taccountListView\r\nDistribution List View     \u00a0:\tDLListView\r\nAlias List View            \u00a0:\taliasListView \r\nResource List View         \u00a0: \tresourceListView\r\nClass of Service LIst View \u00a0: \tCOSListView\r\nDomain List View           \u00a0:\tdomainListView\r\nServer List View           \u00a0:\tserverListView\r\nZimlet List View           \u00a0: \tzimletListView\r\nAdmin Zimlet List View     \u00a0:\tadminZimletListView \r\nGlobal Settings View       \u00a0: \tglobalConfigView \r\nGlobal Server Status View  \u00a0:\tglobalServerStatusView \r\nHelp Search View           \u00a0:\thelpSearch \r\nSaved Searches View        \u00a0: \tsaveSearch \r\nMail Queue View            \u00a0: \tmailQueue \r\nBackups  View              \u00a0: \tbackupsView \r\nCertificates View          \u00a0: \tcertsView \r\nSoftware Updates           \u00a0: \tsoftwareUpdatesView\r\nAccount Migration          \u00a0:\tbulkProvisionTasksView\r\nPer Server Statistics View \u00a0: \tperServerStatisticsView \r\nGlobal ACL View            \u00a0: \tglobalPermissionView \r\nRight List View            \u00a0:\trightListView\r\n<\/pre>\n<h3><span id=\"Assigning_the_admin_view\" class=\"mw-headline\">Assigning the admin view<\/span><\/h3>\n<pre>  $ zmprov ma delegatedadmin@example.com zimbraAdminConsoleUIComponents accountListView  zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents COSListView\r\n<\/pre>\n<pre>  $ zmprov ga delegatedadmin@example.com  | grep -i view\r\n  zimbraAdminConsoleUIComponents: accountListView\r\n  zimbraAdminConsoleUIComponents: DLListView\r\n  zimbraAdminConsoleUIComponents: COSListView\r\n<\/pre>\n<h3><span id=\"Revoking_admin_view\" class=\"mw-headline\">Revoking admin view<\/span><\/h3>\n<p><b>caution<\/b>: If you want to revoke the COS list view, then you need to run the full command except appending the revoking component &#8216;COSListView&#8217;<\/p>\n<pre>  $ zmprov ma delegatedadmin@example.com zimbraAdminConsoleUIComponents accountListView  zimbraAdminConsoleUIComponents DLListView\r\n<\/pre>\n<pre>  $ zmprov ga delegatedadmin@domain.com  | grep -i view\r\n    zimbraAdminConsoleUIComponents: accountListView\r\n    zimbraAdminConsoleUIComponents: DLListView\r\n<\/pre>\n<h2><span id=\"Configure_Grants_on_Administrator_Accounts\" class=\"mw-headline\">Configure Grants on Administrator Accounts<\/span><\/h2>\n<h3><span id=\"Manage_Domains\" class=\"mw-headline\">Manage Domains<\/span><\/h3>\n<h4><span id=\"Granting_the_rights_to_manage_domains\" class=\"mw-headline\">Granting the rights to manage domains<\/span><\/h4>\n<p>Syntax:<\/p>\n<pre>grantRight(grr) {target-type} [{target-id|target-name}] {grantee-type} [{grantee-id|grantee-name} [secret]] {[-]right}\r\n<\/pre>\n<p>Example<\/p>\n<pre>$ zmprov grr domain example.com  usr delegatedadmin@domain.com  domainAdminRights\r\n<\/pre>\n<h4><span id=\"View_grants\" class=\"mw-headline\">View grants<\/span><\/h4>\n<p>Syntax:<\/p>\n<pre>getGrants(gg) [-t {target-type} [{target-id|target-name}]] [-g {grantee-type} {grantee-id|grantee-name} [{0|1 (whether to include grants granted to groups the grantee belongs)}]]\r\n<\/pre>\n<p>Example<\/p>\n<pre>$ zmprov gg -t example.com\r\ntarget type  target id                            target name                    grantee type grantee id                           grantee name                   right\r\n------------ ------------------------------------ ------------------------------ ------------ ------------------------------------ ------------------------------ --------------------\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   grp          f05e6210-1c19-42cb-9ab5-bccd7a045cb7 zimbradomainadmins@example.com +domainAdminConsoleRights\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 deleagtedadmin@example.com       domainAdminConsoleRights\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   usr          928c917e-ed9d-453c-84e0-a7d1da86cf14 deleagtedadmin@example.com       domainAdminRights\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 deleagtedadmin@example.com       domainAdminRights\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 deleagtedadmin@example.com       domainAdminConsoleAccountRights\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 deleagtedadmin@example.com       domainAdminAccountRights\r\ndomain       15274f2b-9f64-4bd0-88c9-ec94874d8151 example.com                   usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 deleagtedadmin@example.com       adminLoginAs\r\n<\/pre>\n<h3><span id=\"Managing_Distribution_list\" class=\"mw-headline\">Managing Distribution list<\/span><\/h3>\n<h4><span id=\"Granting_rights_to_delegated_admin_to_manage_DL\" class=\"mw-headline\">Granting rights to delegated admin to manage DL<\/span><\/h4>\n<pre> $ zmprov grr dl newdl1@example.com usr deleagtedadmin@example.com domainAdminDistributionListRights\r\n<\/pre>\n<h4><span id=\"Viewing_rights_assigned_to_DL\" class=\"mw-headline\">Viewing rights assigned to DL<\/span><\/h4>\n<pre>$ zmprov gg -t dl newdl1@example.com 0\r\n target type  target id                            target name                    grantee type grantee id                           grantee name                   right\r\n ------------ ------------------------------------ ------------------------------ ------------ ------------------------------------ ------------------------------ --------------------\r\ndl           2efe18a9-35a7-4553-9347-a744bb35943a newdl1@example.com            usr        400eecbd-6da3-4cdb-8791-fd5f42faade6 delegatedadmin@example.com       domainAdminDistributionListRights\r\n<\/pre>\n<h2><span id=\"Examples\" class=\"mw-headline\">Examples<\/span><\/h2>\n<p>1. Delegated admin of example1.com can manage the DL of example2.com<\/p>\n<pre>$ zmprov grr dl list@example2.com usr delegatedadmin@example1.com domainAdminDistributionListRights\r\n<\/pre>\n<pre>$ zmprov gg -t dl list@example2.com  \r\n target type  target id                            target name                    grantee type grantee id                           grantee name                   right\r\n ------------ ------------------------------------ ------------------------------ ------------ ------------------------------------ ------------------------------ --------------------\r\n dl           7163e8b2-a192-4898-a76a-36d288523a4a list@example2.com         usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 delegateadmin@example1.com       domainAdminDistributionListRights\r\n<\/pre>\n<p>2. Assigning the delegated admin all the &#8220;Global Administrator&#8221; rights except &#8220;view mail&#8221; option.<\/p>\n<p>Admin Views<\/p>\n<pre>$ zmprov ma delegatedadmin@example.com zimbraAdminConsoleUIComponents accountListView  zimbraAdminConsoleUIComponents DLListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents resourceListView zimbraAdminConsoleUIComponents COSListView zimbraAdminConsoleUIComponents domainListView zimbraAdminConsoleUIComponents serverListView zimbraAdminConsoleUIComponents zimletListView zimbraAdminConsoleUIComponents adminZimletListView zimbraAdminConsoleUIComponents globalConfigView zimbraAdminConsoleUIComponents globalServerStatusView zimbraAdminConsoleUIComponents helpSearch zimbraAdminConsoleUIComponents saveSearch zimbraAdminConsoleUIComponents mailQueue zimbraAdminConsoleUIComponents backupsView zimbraAdminConsoleUIComponents certsView zimbraAdminConsoleUIComponents softwareUpdatesView zimbraAdminConsoleUIComponents bulkProvisionTasksView zimbraAdminConsoleUIComponents perServerStatisticsView zimbraAdminConsoleUIComponents globalPermissionView zimbraAdminConsoleUIComponents rightListView \r\n<\/pre>\n<p>Granting the rights<\/p>\n<pre>zmprov grr domain example.com usr delegatedadmin@example.com domainAdminRights\r\nzmprov grr global usr delegatedadmin@example.com domainAdminRights\t\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleAliasRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleDomainRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleCOSRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleServerStatusRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleResourceRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleSoftwareUpdatesRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleServerStatisticRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleExtensionRights\t\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleBackupRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleMigrationRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleMailQueueRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleSavedSearchRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleDLRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleCertificateRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleGlobalRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleGlobalACLTabRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleServerRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleAccountRights\r\nzmprov grr global usr delegatedadmin@example.com adminConsoleZimletRights\r\n<\/pre>\n<p>3. Revoking domainAdminRights from delegated admin<\/p>\n<pre>$zmprov gg -t domain example.com              \r\ntarget type  target id                            target name                    grantee type grantee id                           grantee name                   right\r\n------------ ------------------------------------ ------------------------------ ------------ ------------------------------------ ------------------------------ --------------------\r\ndomain       3c8de9e0-8228-4b48-931e-bc1b040683ed example.com                  usr          928c917e-ed9d-453c-84e0-a7d1da86cf14 delegatedadmin@example.com    domainAdminRights\r\n<\/pre>\n<pre>$zmprov rvr domain example.com usr delegatedadmin@example.com domainAdminRights\r\n$zmprov gg -t domain example.com\r\ntarget type  target id                            target name                    grantee type grantee id                           grantee name                   right\r\n------------ ------------------------------------ ------------------------------ ------------ ------------------------------------ ------------------------------ --------------------\r\n<\/pre>\n<p>4. Delegated Administrator allowed to manage calendar resource<\/p>\n<pre>$ zmprov grr calresource projector@example.com  usr delegatedadmin@example.com domainAdminCalendarResourceRights\r\n<\/pre>\n<pre>$ zmprov gg -t calresource projector@example.com \r\ntarget type  target id                            target name                    grantee type grantee id                           grantee name                   right\r\n------------ ------------------------------------ ------------------------------ ------------ ------------------------------------ ------------------------------ --------------------\r\ncalresource  19363368-4e64-43d7-bc7e-832b91c3bd93 projector@example.com         usr          400eecbd-6da3-4cdb-8791-fd5f42faade6 delegatedadmin@example.com       domainAdminCalendarResourceRights\r\n<\/pre>\n<h2><span id=\"Miscellaneous_commands\" class=\"mw-headline\">Miscellaneous commands<\/span><\/h2>\n<p>To get all acccount rights:-<\/p>\n<pre>$ zmprov gar account\r\n<\/pre>\n<p>To get effective rights for domain admin:-<\/p>\n<pre>$ zmprov ger account deleagtedadmin@example.com\r\n<\/pre>\n<p>To get all DL rights:-<\/p>\n<pre>$ zmprov gar dl\r\n<\/pre>\n<p>To get effective rights for distribution list:-<\/p>\n<pre>$ zmprov ger dl newdl@example.com\r\n<\/pre>\n<p>To list global grants<\/p>\n<pre>$ zmprov gg -t global<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Below are the guidelines to manage the distribution list through CLI. Create domain $ zmprov cd domain.com zimbraAuthMech zimbra Create the delegated admin $ zmprov ca delegatedadmin@example.com &lt;passwd&gt; zimbraIsDelegatedAdminAccount TRUE<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[455,91,730,1,830,42,495,68,271,548,896],"tags":[899,900,898,897,134],"class_list":["post-3838","post","type-post","status-publish","format-standard","hentry","category-apache2","category-banco-de-dados","category-clusterweb","category-viazap","category-debian","category-leitura-recomendada","category-profissional-de-ti","category-redes-2","category-seguranca-2","category-ubuntu-2","category-zimbra","tag-administration","tag-cli","tag-delegated","tag-implementing","tag-zimbra"],"_links":{"self":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/3838","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3838"}],"version-history":[{"count":1,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/3838\/revisions"}],"predecessor-version":[{"id":3839,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/3838\/revisions\/3839"}],"wp:attachment":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3838"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3838"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3838"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}