How to create a role within the Role Based Administration (RBA) to only allow the user to enable and disable mailboxes.

In order to create the roll assignment and assign it to a user or group, follow the steps below:

 

1. Open the Authorization Manager from the Vault Administration console logged in as the Vault Service Account (VSA). Right-click on the Directory and click 'Authorization Manager'. (Figure 1)

Figure 1
 

2. Select 'Enterprise Vault', 'Definition' and 'Role Definition' and right-click on 'Role Definition' --> 'New Role Definition'. (Figure 2)

Figure 2
 

3. Name the new role as 'Enable-Disable Only' and put a description to it. (Figure 3)

Figure 3
 

4. Click the Add button, and select the Operations tab, select the operation definitions and click 'OK' twice. (Figure 4)
 

Figure 4
 

 

 

5. Enable the new defined role in the 'Role Assignments'. (Figure 5)
 

a. Right-click on the Role Assignments
 

b. Assign roles...
 

c. Check the 'Enable-Disable Only' definition and click OK.
 

 

Note: This will add the definition in the Role Assignments
 

Figure 5
 

6. Add the desired Windows User or Group to the newly created role. (Figure 6)
 

a. Right-click on the 'Enable-Disable Only' (Enterprise Vault, Role Assignments) group and select 'Assign Windows users and groups'
 

b. Add the desired user or group and click OK.
 

Figure 6
 

7. Close the 'Authorization Manager' answering yes to the question 'Do you want to save the Authorization Store to the directory database?'

8. Test the new user by using the 'run as...' function on the EV Administration Console.