cancel
Showing results for 
Search instead for 
Did you mean: 

How to set Authorization Scope

Peter_N1
Level 2
Partner

Hi,

i need to create a Enterprise Vault autorization group to permit multiple site admins to:

a) import psts to archives

b) which are in the vault store of their site only

Is it possible to scope the authorization definition to a Vault Store or Group of Users?

Has anyone built a working "import pst only" definition?

 

Thank you for any advice.

PS: All archives are on 1 EV Server in the HQ

 

1 ACCEPTED SOLUTION

Accepted Solutions

TonySterling
Moderator
Moderator
Partner    VIP    Accredited Certified

Sorry, but you are not going to be able to limit the scope of the PST migration to certain PSTs to certain archives or by country. 

Perhaps enable auditing so you can track if someone does that??

View solution in original post

6 REPLIES 6

TonySterling
Moderator
Moderator
Partner    VIP    Accredited Certified

Sorry, but I don't think that will be possible based on your requirements.  I am bit confused by the request, what is the use case?

AndrewB
Moderator
Moderator
Partner    VIP    Accredited

there is a role called PST Administrator. have you tested it already? does that give too much?

i see a task for "EVT Import and Export Archives" but not one for just Import Archives.

Peter_N1
Level 2
Partner

 

Hi,

thank you for the response.

The use case is, my customer has a central IT department in Austria with centralised Exchange Server and Enterprise Vault Server. They have subsidiaries in Brazil, China, Denmark, etc. They want the local administrators of the subsideries to import the Users PST into the related Vault Store (which are separated by location).

e.g.: Brazil Admins to import local PSTs to Brazil Vault Store in Vienna

I know the "EVT Import and Export Archives" Role.

My customer has 2 problems with that:

They dont want that its possible for a subsidiary admin to export any vault data to PST, exept his own country.

So requirement is a role:

1) to only import data (mendatory)

2) to scope only on the Vault Store for the country (if possible)

 

I dont know if there is a different way to do this. We have the "locate, assign, import" process in place for the austria psts, because they can decide what psts to import for their own people.

 

regards

Peter

PS: sorry for my late answer. I didnt get a notification about pending replys, but only spam about every other threat that is new.

 

 

 

 

TonySterling
Moderator
Moderator
Partner    VIP    Accredited Certified

Sorry, but you are not going to be able to limit the scope of the PST migration to certain PSTs to certain archives or by country. 

Perhaps enable auditing so you can track if someone does that??

Peter_N1
Level 2
Partner

Thanks again. I guess that should be a "arent".

At least it should be possible to build a new role to just import and not export.

Guess i need to work that out on my own.

 

regards

Peter

TonySterling
Moderator
Moderator
Partner    VIP    Accredited Certified

Yep, sorry about that.  :)  I fixed it in the post so it makes sense.