Administrative Functions Explained

User accounts established on the Directory Server can be awarded administrative privileges, allowing them to control the permissions provided to other accounts, domain settings, or a mix of the two.

This article describes the key pre-built roles and their corresponding rights. Users in these groups immediately inherit the group’s rights. Pre-built roles are hierarchical, which means that each position has certain unique rights in addition to the rights of the roles below: for example, a Delegated Domain Admin has all of the rights of a User, Group, and Help Desk Administrator.

Except for Global Administrators, who have access to all domains and settings created in the Carbonio Admin Panel, all other pre-built roles enable you to control the settings of a single domain or a portion of a domain.

Requirements

These prerequisites must be met before you may control privileges.

1. To utilise correctly, a domain must be initialised via Domains ‣ Manage ‣ Delegated Domain Admins.
2. Alternatively, you can initialise a domain using the CLI:
3. To initialise, replace example.com with your domain.
4. Users qualified to become Administrators must have the property zimbraIsDelegationAdminAccount set to True.

How to Create an Administrator.

The technique for creating Administrators differs slightly from that of Global Admins.

Global Administrators

They, also known as Infrastructure Administrators, have full access to the Carbonio Admin Panel and API, allowing them to administer all aspects of the Carbonio Infrastructure.

This is a list of rights reserved solely for the Global Administrator. These are connected to the overall Carbonio infrastructure.

• Manage domains.
• Manage Class of Service.
• Manage administrators and their duties.
• Manage Global Configuration.
• Theme and Whitelabel settings
• Default Domain
• Manage the MTA setup.
• Blocked extension
• Enable or disable authentication for each node.
• Relay for external delivery.
• Trusted Network
• Max Size
• MTA restriction and RBL (smtpd_recipient_restrictions).
• AS/AV Configuration
• Kill/Tag Score
• Subject Prefix:
• Update Frequency
• AV Archives
• AV notification settings Proxy configuration
• Manage other users, including administrators, by changing their passwords, authenticating them, and managing their files and settings.
• Manage the infrastructure licence and subscription.
• Manage storage configurations.
• S3 Bucket
• Server Volumes (Primary, Secondary, Index).
• HSM Policy and Settings
• Manage Backup Configuration.