How to Grant permissions on all vaulted mailboxes to a specific user

[Tacobell]

Hello,

I've been asked to grant a couple of users full access to the Vault. They should be able to access everyone's emails using archive explorer. How do I do this?

Alexis Crawford

[TonySterling · Accepted solution]

If it is for all archives use EVPM


http://support.veritas.com/docs/321592

How to give permissions to an archive using Enterprise Vault Policy Manager (EVPM)

---

Details:

This can be achieved by creating an EVPM script, specifying the particular details and running it against the affected archive.

Modify the script below to match the particular DirectoryComputerName, SiteName and mailbox distinguished name.

Edit the file in Notepad and save in UNICODE format, with an .ini extension.

[Directory]

DirectoryComputerName=kvsvault

SiteName=archivesite

[ArchivePermissions]

ArchiveName = john doe

GrantAccess = read write delete, ourdomain\smith

ArchiveName

Mandatory. Identifies the archive to which the permission settings are applied.

If there are multiple folders with the same name and you specify a name, Policy Manager modifies only the first one that it finds. In this case, you must use archive IDs to specify the archives.

Possible values:

The name of an archive

An archive ID

ALL (permissions are applied to all journal, shared, and mailbox archives in the specified vault site)

ALL_JOURNAL (permissions are applied to all journal archives)

ALL_SHARED (permissions are applied to all shared archives)

ALL_MAILBOX (permissions are applied to all mailbox archives)

GrantAccess

Optional. Grants to the specified Windows accounts the specified access to the archive.

The new values supplement any existing access rights. You can have many occurrences of GrantAccess within the same [ArchivePermissions] section.

Possible values:

A list of permissions, followed by a comma and then a comma-delimited list of groups or accounts that are granted the specified permissions. Permissions can be any of read, write, and delete, followed by a comma. For example, to grant read and write access to ourdomain\smith:

GrantAccess = read write, ourdomain\smith

Refer to the policy manager to obtain more information on using EVPM

[Evault_Professi]

Access the User's Archive through the Evault Console using the "Archives" display on the left pane. Access the properties MENU of the archive and add each permission for every user account that will require access to the archive.

Hope this helps!
Thanks,
Dennis