Tacobell
15 years agoLevel 4
How to Grant permissions on all vaulted mailboxes to a specific user
Hello,
I've been asked to grant a couple of users full access to the Vault. They should be able to access everyone's emails using archive explorer. How do I do this?
Alexis Crawford
- 15 years ago
If it is for all archives use EVPM
http://support.veritas.com/docs/321592
How to give permissions to an archive using Enterprise Vault Policy Manager (EVPM)
Details:
This can be achieved by creating an EVPM script, specifying the particular details and running it against the affected archive.Modify the script below to match the particular DirectoryComputerName, SiteName and mailbox distinguished name.Edit the file in Notepad and save in UNICODE format, with an .ini extension.[Directory]DirectoryComputerName=kvsvaultSiteName=archivesite[ArchivePermissions]ArchiveName = john doeGrantAccess = read write delete, ourdomain\smithArchiveNameMandatory. Identifies the archive to which the permission settings are applied.If there are multiple folders with the same name and you specify a name, Policy Manager modifies only the first one that it finds. In this case, you must use archive IDs to specify the archives.Possible values:The name of an archiveAn archive IDALL (permissions are applied to all journal, shared, and mailbox archives in the specified vault site)ALL_JOURNAL (permissions are applied to all journal archives)ALL_SHARED (permissions are applied to all shared archives)ALL_MAILBOX (permissions are applied to all mailbox archives)GrantAccessOptional. Grants to the specified Windows accounts the specified access to the archive.The new values supplement any existing access rights. You can have many occurrences of GrantAccess within the same [ArchivePermissions] section.Possible values:A list of permissions, followed by a comma and then a comma-delimited list of groups or accounts that are granted the specified permissions. Permissions can be any of read, write, and delete, followed by a comma. For example, to grant read and write access to ourdomain\smith:GrantAccess = read write, ourdomain\smithRefer to the policy manager to obtain more information on using EVPM