Enterprise Vault.cloud™ Archive Administration Help
- Getting started with Archive Administration
- Archive Overview
- My Config
- About the My Config page
- About Services
- Selecting the User Management options
- Configuring Office 365 Sync
- Creating a custom role group for the Office 365 Sync account
- About Office 365 mailbox delegation permissions synchronization
- About Provisioning
- About Office 365 synchronizations
- Running and scheduling Office 365 synchronization events
- Office 365 Sync reporting
- Viewing the Office 365 Sync summary and reports
- CloudLink Sync Summary
- About Managed Tags
- About Account Management
- Searching for archive accounts
- Using search filters
- Creating an archive account
- Viewing the details of an archive account
- About the Account Details page
- Editing an archive account
- Deleting an archive account
- Deploying users
- Removing user access
- Enabling services for existing archive accounts
- Editing Mobile Web Access permission for existing archive accounts
- Unlocking an archive account
- Exporting archive account information
- Archive Collectors
- About Archive Collectors
- About Box File Archiving
- Setting up the link to Box
- Removing the link to Box
- Enabling file collection automatically when the service maps an account
- Enabling unmapped user reporting
- Adding to the list of file extensions that are archived from Box
- Changing the file extensions to archive for individual users
- Enabling or disabling file collection manually for mapped users
- Downloading a Box user list
- About Salesforce Chatter Archiving
- About Lync On-Premises Archiving
- About Bloomberg Archiving
- Role Management
- Policy Management
- Classification
- Import Data
- Authentication Management
- Configuring the Enterprise Vault.cloud authentication service
- Enabling the Authentication Settings permission for the Policy Manager role
- Assigning the Policy Manager role to an administrator
- Selecting an authentication method
- Uploading a token-signing certificate
- Validating the Identity Provider URL
- Activating single sign-on
- AD FS Configuration Guide
- Retention Management
- About Retention Management
- Configuring the default retention period
- Creating a retention policy
- Editing a retention policy
- Deleting a retention policy
- Associating a retention policy with a policy target
- Disassociating a retention policy from a policy target
- Enabling and disabling the storage expiry setting
- Viewing the storage expiry status table
- Continuity Management
- About Email Continuity
- Email Continuity prerequisites
- Configuring Email Continuity
- Provisioning the Email Continuity service for your mail servers
- Adding the Email Continuity IP ranges to your firewall and mail server whitelists
- Updating your email security provider routing configuration
- Testing the Email Continuity configuration
- Managing Email Continuity
- Email Continuity FAQ
- Reporting and Notifications
- About Enterprise Vault.cloud reports and logs
- Viewing the Activity Log
- Viewing the Message Log
- Viewing the Usage Log
- Viewing the Usage Reports
- Creating a Retention Log Report
- Viewing the Mobile Browser Log
- Viewing the Personal Browser Log
- Viewing the Discovery Browser Log
- Creating a Messaging Report
- Creating a Personal Archive Report
- Creating a Mobile Web Access Report
- Creating a Discovery Archive Report
- Usage notifications
- Enabling or disabling usage notifications
- Changing the usage notification threshold and frequency
- Adding email addresses for usage notifications
- Removing email addresses from usage notifications
- Personal.cloud Deployment for IBM Notes
- Archive Administration Updates in Previous Releases
- About the updates for previous releases
- March 2017 updates
- August 2016 updates
- May 2016 updates
- January 2016 updates
- December 2015 updates
- November 2015 updates
- August 2015 updates
- May 2015 updates
- February 2015 updates
- November 2014 updates
- August 2014 updates
- May 2014 updates
- November 2013 updates
- July 2013 updates
- May 2013 updates
- February/March 2013 updates
- November 2012 updates
- May 2012 updates
- March 2012 updates
- January/February 2012 updates
- January 2012 updates
- Archive Administration Known Issues
Effects of synchronized mailbox delegation permissions
The effects of synchronized mailbox delegation permissions depend on whether the permissions are granted to a user or to a mail-enabled security group.
Table: Effects of synchronized delegation permissions granted to a user describes the effects when the permissions are granted to a user.
Table: Effects of synchronized delegation permissions granted to a user
Mailbox delegation permission | Effect of the synchronized permission in Personal.cloud |
|---|---|
Full Access | The user can read the account's archived items in Personal.cloud. Note: This access is not granted if the user belongs to a group that has a synchronized Deny Full Access permission. |
Deny Full Access * | The user cannot read the account's archived items in Personal.cloud. |
Send As | No effect at this release. |
Send on Behalf | No effect at this release. |
* Deny Full Access permission can only be set from PowerShell.
Table: Effects of synchronized delegation permissions granted to a mail-enabled security group describes the effects when the permissions are granted to a mail-enabled security group.
Table: Effects of synchronized delegation permissions granted to a mail-enabled security group
Mailbox delegation permission | Effect of the synchronized permission in Personal.cloud |
|---|---|
Full Access | Users who are members of the group can read the account's archived items in Personal.cloud. Note: This access is not granted if the user has a synchronized Deny Full Access permission. |
Deny Full Access* | Users who are members of the group cannot read the account's archived items in Personal.cloud. |
Send As | No effect at this release. |
Send on Behalf | No effect at this release. |
* Deny Full Access permission can only be set from PowerShell.
Note that if Enterprise Vault.cloud synchronizes conflicting delegation permissions, precedence is given to deny permissions. This behavior matches Microsoft's handling of conflicting delegation permissions with regard to mailbox access.
Consider this example scenario of a mailbox to which the Office 365 administrator has assigned a number of delegation permissions.
Figure: Example: An Office 365 mailbox with delegation permissions set for users and mail-enabled security groups
In this example, the Office 365 administrator has granted the following delegate access to the mailbox:
User A and members of Group 1 have been given Full Access permission.
User B and members of Group 2 have been given Deny Full Access permission.
Assuming that Office 365 Sync has synchronized all of these delegation permissions, then User A and members of Group 1 can access the mailbox archive.
Note that this access is subject to the precedence of any deny delegation permissions. For example if User A is a member of Group 2, then User A cannot access the mailbox archive because Group 2's Deny Access delegation permission overrides User A's Full Access permission.