PROBLEM
How do I create and administer admin users roles in my atmail mail server installation?
ENVIRONMENT
- atmail mail server
CAUSE
Requirement for admin user account administration.
RESOLUTION
The following document will be divided into the following sections:
- What are admin user roles?
- Adding admin user roles
- Editing admin user roles
- Deleting admin user roles
What are admin user roles?
Admin user roles are a preset list of permissions that you can assign to your admin users. Using these roles allows you to create and edit admin users easier, by giving them a preset list of permissions without the need to select specific permissions each time an admin user is created or edited.
Adding admin user roles
- Log into your webadmin.
https://yourhostname.com/admin/ - Go to webadmin > Security > List roles
- Click onto Create sub role under the user role you want to create a new user role under.
- Role name
Give your new user role a name. - Role description
Give your new user role a description.
- all ON/OFF
Access to everything - account.all ON/OFF
Right to all account actions - account.add ON/OFF
Right to add accounts - account.delete ON/OFF
Right to delete accounts - account.edit ON/OFF
Right to edit accounts - account.list ON/OFF
Right to view list of accounts - account.view ON/OFF
Right to view an account - account.import ON/OFF
Right to imports accounts - account.export ON/OFF
Right to export accounts - domain.all ON/OFF
Right to all domain actions - domain.add ON/OFF
Right to add domains - domain.delete ON/OFF
Right to delete domains - domain.edit ON/OFF
Right to edit domains - domain.view ON/OFF
Right to view domain information - service.all ON/OFF
Right to all service actions - service.imap.view ON/OFF
Right to view IMAP settings - service.imap.edit ON/OFF
Right to edit IMAP settings - service.smtp.view ON/OFF
Right to view SMTP settings - service.smtp.edit ON/OFF
Right to edit SMTP settings - service.spam.view ON/OFF
Right to view anti-spam settings - service.spam.edit ON/OFF
Right to edit anti-spam settings - service.antivirus.view ON/OFF
Right to view anti-virus settings - service.antivirus.edit ON/OFF
Right to edit anti-virus settings - service.mailaliases.list ON/OFF
Right to view list of mail aliases - service.mailaliases.add ON/OFF
Right to add mail aliases - service.mailaliases.delete ON/OFF
Right to delete mail aliases - service.mailrelays.list ON/OFF
Right to view list of mail relays - service.mailrelays.add ON/OFF
Right to add mail relays - service.mailrelays.delete ON/OFF
Right to delete mail relays - service.publishconfig ON/OFF
Right to publish configuration files - service.dav.view ON/OFF
Right to view dav settings - service.dav.edit ON/OFF
Right to edit dav settings - dashboard.all ON/OFF
Right to access all dashboard components - dashboard.gettingstarted ON/OFF
Right to access Getting Started wizard - dashboard.logs.search ON/OFF
Right to search logs - dashboard.logs.view ON/OFF
Right to view log graphs and info - dashboard.myaccount ON/OFF
Right to access My Account page - dashboard.tour ON/OFF
Right to access Tour Checklist page - dashboard.statistics ON/OFF
Right to view server statistics - settings.all ON/OFF
Right to all settings actions - settings.logs.view ON/OFF
Right to view logging settings - settings.logs.edit ON/OFF
Right to edit logging settings - settings.global.view ON/OFF
Right to view 'global' settings - settings.global.edit ON/OFF
Right to edit 'global' settings - settings.branding.view ON/OFF
Right to view branding settings - settings.branding.edit ON/OFF
Right to edit branding settings - security.all ON/OFF
Right to all security actions - security.passwordpolicy.view ON/OFF
Right to view password policy settings - security.passwordpolicy.edit ON/OFF
Right to edit password policy settings - security.authentication.view ON/OFF
Right to view authentication settings - security.authentication.edit ON/OFF
Right to edit authentication settings - security.user.all ON/OFF
Right to all user actions - security.user.add ON/OFF
Right to add admin users - security.user.delete ON/OFF
Right to delete admin users - security.user.edit ON/OFF
Right to edit admin users - security.user.list ON/OFF
Right to view list of admin users - security.user.view ON/OFF
Right to view an admin user - security.deletedaccount.view ON/OFF
Right to view deleted accounts list - security.deletedaccount.edit ON/OFF
Right to update deleted accounts list - license.all ON/OFF
Right to all license actions - license.register ON/OFF
Right to register a licence - license.details ON/OFF
Right to view license details - license.delete ON/OFF
Right to delete a licence - plugins.all ON/OFF
Right to all plugins actions - plugins.edit ON/OFF
Right to edit plugins - plugins.view ON/OFF
Right to view plugins
- all ON/OFF
- Click the Create button at the bottom of the page to create the admin user role.
Editing admin user roles
- Log into your webadmin.
https://yourhostname.com/admin/ - Go to webadmin > Security > List roles > Select the admin user role you wish to edit.
- Make changes to the admin user role as desired and click onto the Update button at the bottom of the page.
Deleting admin user roles
- Log into your webadmin.
https://yourhostname.com/admin/ - Go to webadmin > Security > List roles > Click Delete next to the admin user role you wish to remove. Click OK to confirm.
Hello,
if we want to have subadmin (domain administrator) with the same privileges like we had them in Atmail7, my guess is that account.all and dashboard.all privileges would be enough?
b.r.
Mladen