How to create a role within the Role Based Administration (RBA) to only allow the user to enable and disable mailboxes.

Problem

Within the Authorization manager there is the ability to create a role within the Role Based Administration (RBA) to only allow the user to enable and disable mailboxes.

Solution

In order to create the roll assignment and assign it to a user or group, follow the steps below:
 
1. Open the Authorization Manager from the Vault Administration console logged in as the Vault Service Account (VSA). Right-click on the Directory and click 'Authorization Manager'. (Figure 1)

Figure 1
 

2. Select 'Enterprise Vault', 'Definition' and 'Role Definition' and right-click on 'Role Definition' --> 'New Role Definition'. (Figure 2)

Figure 2
 

3. Name the new role as 'Enable-Disable Only' and put a description to it. (Figure 3)

Figure 3
 

4. Click the Add button, and select the Operations tab, select the operation definitions and click 'OK' twice. (Figure 4)
 
  • {DIR.EN_US} Can administer Enterprise Vault
  • Can enable and disable Exchange mailboxes
  • Can manage Enterprise Vault Exchange Mailbox tasks

Figure 4
 

 

 

5. Enable the new defined role in the 'Role Assignments'. (Figure 5)
 
a. Right-click on the Role Assignments
 
b. Assign roles...
 
c. Check the 'Enable-Disable Only' definition and click OK.
 

 
Note: This will add the definition in the Role Assignments
 

Figure 5
 

6. Add the desired Windows User or Group to the newly created role. (Figure 6)
 
a. Right-click on the 'Enable-Disable Only' (Enterprise Vault, Role Assignments) group and select 'Assign Windows users and groups'
 
b. Add the desired user or group and click OK.
 

Figure 6
 

7. Close the 'Authorization Manager' answering yes to the question 'Do you want to save the Authorization Store to the directory database?'

8. Test the new user by using the 'run as...' function on the EV Administration Console.
 

Terms of use for this information are found in Legal Notices.

Search

Survey

Did this article answer your question or resolve your issue?

No
Yes

Did this article save you the trouble of contacting technical support?

No
Yes

How can we make this article more helpful?

Email Address (Optional)