Permissions on a vault

[jpergola329]

What accounts should have access to a users vault?

the user

evadmin

????

thanks

[Rob_Wilcox1 · Accepted solution]

Completely depends on your environment.

Here is one of my test users:

[TonySterling]

As Rob said, it will depend on your environment but typically only the user has permission on their archive plus any permissions that are synchronized from Exchange\AD.

If you require the VSA to have permission on all the archives you can run an EVPM Script.

How to grant Enterprise Vault permissions on all archives to a user using EVPM (Enterprise Vault Policy Manager)

Article:TECH195096

|

Created: 2012-08-16

|

Updated: 2014-06-16

|

Article URL http://www.symantec.com/docs/TECH195096

[WiTSend]

By default only the user and any other accounts that have been granted specific (not inherited) permissions to the mailbox.  Additionally (and not shown in the permissions tab) any user access granted to folders in Outlook will have access to those folders in the archive.

You have the option of granting inherited permissions automatically (not generally recommended).  Or as Tony stated you can use EVPM if you wish to grant the service account (or any other account) permissions to all archives (this is a point-in-time and will not affect archives created after it is run).