Delegated Admin Provisioning Zextras Admin

What exactly is Delegated Administration Provisioning?

The collection of actions that allows you to give, update, and remove Domain Admin access to a user is known as Delegated Admin Provisioning.

All Delegated Admin Provisioning procedures are available

• The Administration Zimlet’s Zextras Admin tab
• Running the required zxsuite command as the zimbra user from the CLI

Giving a User Delegated Admin Rights

Zimlet from the Administration

Click the Add button in the Delegated Admins section of the Zextras Admin tab in the Administration Zimlet.

You will be asked to provide the following information:

• Account: The email account to whom Delegated Admin access should be granted.
• Domain: The domain over which the Delegated Administrator will have authority
• Check this box to grant the Delegated Admin access to the View Mail functionalities on any mailbox in the chosen domain.
• The maximum mailbox quota that this Delegated Admin can assign to a user.
• Edit Features: This option specifies whether the Delegated Admin may change the contents of the Features page for its assigned users.

According to the CLI

To provide a user Delegated Admin permissions, use the doAddDelegationSettings command.

Changing the Rights of an Existing Delegated Administrator

Zimlet from the Administration

Select an entry from the list in the Delegated Admins section of the Zextras Admin tab in the Administration Zimlet and click the Edit button.

You may also modify an entry in the list by double clicking it.

According to the CLI

Use the doEditDelegationSettings command to modify the rights of an existing Delegated Admin.

Management of Quotas

What exactly is quota management?

The Global Administrator can use Zextras Admin to define two types of quota limits: the Grant Limit and the Domain Quota.

Because neither the Domain Quota nor the award Limit are required, a Delegated Admin can award any quota to a user and a domain can have no maximum quota limit.

The Grant Capacity

A Delegated Admin’s Grant Limit is one of its attributes.

It indicates the maximum mailbox quota that the Delegated Admin can provide to a mailbox and is configurable in the Delegated Admin’s settings.

There are three options:

• None: The Delegated Admin cannot change a mailbox’s Quota property.
• Custom: The Delegated Admin has the ability to grant up to the given value. This takes precedence over any domain/COS quota settings.
• Unlimited: The mailbox can be assigned any quota by the Delegated Admin. This takes precedence over any domain/COS quota settings.

Domain Restrictions

• The maximum number of accounts that may be established on this domain is known as the global account limit.
• Domain Quota: The maximum mailbox quota that any Administrator can assign to a domain mailbox.
• COS Limits: Specify which Classes of Service are available to domain users and the maximum number of users per Class of Service.

Edit Domain Limits from the Administration Zimlet

All domains in the Zimbra infrastructure are included in the Domain Settings list in the Administration Zimlet’s Zextras Admin page.

To change the domain restrictions, choose the domain from the Domain Settings list and click the Edit option.

According to the CLI

The setDomainSettings command is used to edit the domain restrictions via the CLI.

Reset Domain Limits from the Administration Zimlet

All domains in the Zimbra infrastructure are included in the Domain Settings list in the Administration Zimlet’s Zextras Admin page.

To reset a domain’s limitations, pick it from the Domain Settings list and hit the Reset button, then OK in the confirmation pop-up.

According to the CLI

To reset a Domain’s limitations using the CLI, use the resetDomainSettings command:

Accessing the Zimbra Administration Console as a Delegated Admin Zimbra Administration as a Delegated Admin

To access the Zimbra Administration Console, use a web browser to connect to port 7071 of your mailserver and login using your Zimbra credentials.

For example, https://mail.example.com:7071

Admin Delegated CAN and CAN’T Table

Here’s a short rundown of what a Delegated Admin CAN and CAN’T accomplish using the Zextras Admin module.

Manage: Overview of the Zimbra Administration Console for Delegated Admins

• Accounts: Manage any domain’s accounts for whom delegated admin permissions have been granted.
• Aliases: Manage Aliases for any domain account for which delegated admin permissions have been granted.
• Distribution Lists: Manage the Distribution Lists for any domain that has been assigned admin permissions.
• Manage the Resources for any domain for which delegated admin permissions have been given.
• View the settings of any domain for which delegated administrative powers have been given.
• Search: Conduct sophisticated searches.
• The Zextras Suite
• Zextras Mobile: Manage the synchronisation of mobile devices and clients from any domain where admin privileges have been delegated.
• “Zextras Admin: View the list of Delegated Admins for any domain that has been granted delegated admin rights, as well as quota usage information.”
• Search Bar: Use this to do fast searches.

Log out of the Zimbra Administration Console, [username].

Delegated Admin Log Browsing Describe Delegated Admin Log Browsing

A Global Admin may simply keep track of all Admins’ activity using the Zextras Admin’s search-based graphical log viewer.

The Admin Log Browser for Zextras

The Zextras Admin Log Browser may be accessed by selecting Browse Logs on the Administration Zimlet’s Zextras Admin tab. The Filter Log dialogue box will appear, allowing you to apply filters to the logs you want to view.

The following filters are available:

• Fundamental filters
• Admin: Filter the logs so that only operations conducted by a particular Domain Admin are displayed.
• Filter the logs to only show one specific activity. The possible actions are shown below.
• Filters for advanced users
• Client IP: Filters logs to display only activities conducted from a certain IP address.
• Display Logins: Select this option to display when Domain Administrators log in to the Zimbra Web Client.
• The result is that the logs are filtered to reveal either all operations, successful operations, or unsuccessful operations.
• Start and End: Limits the logs displayed to a given time period (the default is the current day).
• When you click the Details button, the specified filters are applied and the log browser is displayed.