02-08-2016 07:53 AM
Hi,
I have had a look at the roles and definitions, but I can't find anything that suits.
What I would like to do is have a role that the users can only enable new accouns for Vault / Exchange Mailboxes.
I would ideally not like them to be able to do anything else... if that's not possible, i would need to know exactly what else they would get, so that I can get security sign off.
Many thanks in advance.
James
02-08-2016 09:27 AM
if that's all you're looking to do, you dont need them to login to EV but instead, create a provisioning group mapped to an AD group and then have your support folks add users to that group via AD. the provisioning task will run at its scheduled time and automatically pick them up and enable them per the settings.
02-09-2016 04:44 AM
Sounds like a good idea and easy to do. Will just check to see if they have any AD rights to add users to groups.