Granular folder permissions to delegates of email archive.

[macomsupport]

Dear All,

we have a need to give granular access to users email archives, is this possible? users that have been delegated access to say the inbox and a few subfolders of one persons mailbox are able to access all items that have been archived, this needs to be addressed. how can we open the archive and set the permissions on the folders required by the delegate, currently the only settings avalible to us is read or read write on the entire archive.

Enterprise Vault Version: 10.0.1.1171

TIA

Regards

Steve

[AndrewB · Accepted solution]

there's a builtin setting for what you're asking so you don't need to grant access at the whole archive level.

Exchange mailbox policy advanced settings

Synchronize folder permissions

Controls whether synchronization of delegate and shared folder
permissions within mailboxes are synchronized. If these are not
synchronized, only mailbox owners have access to the corresponding
archives. For example, this prevents delegates, from having access to
mailbox archives.

■ Off. Folder permissions are not synchronized.
■ On (default). Folder permissions are synchronized

[GabeV]

By default, Enterprise Vault synchronizes the mailbox folder permissions to the archives. If a user grants access  to one folder in Outlook, it should synchronize the permissions to the archive as well. Let's say that user2 grants permissions to user1 in a specific folder. Then, user1 opens user2 mailbox. If there is an EV shortcut in that folder, it should be able to open the shortcut. However, it will not give full access to the archive. Thus, if the user1 opens archive explorer from his Outlook, user1 will not see user2 archive in the archive's list.

If you want to see the permissions on the archive, there is a tool call PermissionsBrowser in the Enterprise Vault installation directory that might help.

Hope this helps !!