Read-Only Role for VAC

[Scott__Hastings]

GertjanA posted these requirements for a Read-Only Role for the VAC.

I labbed it out and it allows me to start and stop tasks. Is this correct, or did I miss something.

TY!

Scott

I used these, works fine:

The following "Operations" will need to have a check next to them

Can administer Enterprise Vault
Can manage Enterprise Vault Exchange Journaling tasks
Can manage Enterprise Vault Exchange Mailbox tasks
Can Administer Archives
Can administer all Enterprise Vault policies
Can administer all Enterprise vault targets
Can administer Enterprise Vault archives
Can administer Enterprise Vault Exchange Journaling policies
Can administer Enterprise Vault Exchange mailbox policies
Can administer Enterprise Vault Exchange policies
Can administer Enterprise Vault Exchange targets
Can administer Enterprise Vault policies
Can administer Enterprise Vault servers
Can administer Enterprise Vault targets
Can administer Enterprise Vault Vault Stores
Can administer Retention Categories
Can manage Enterprise Vault Exchange Journaling tasks
Can manage Enterprise Vault Exchange Mailbox tasks
Can manage Enterprise Vault services
Can manage Enterprise Vault tasks
Can manage Exchange Journal Archives
Can manage Exchange Mailbox Archives
Can use Server Manager
Can View Site Archiving Defaults property page
Can view Site Archiving Usage Limit property page
Can view Site General property page
Can Site monitoring property page
Can view Site Schedule property page
Can view Site Shortcut Deletion property page
Can view Site Storage Expiry property page 

[TonySterling · Accepted solution]

I would imagine as long as the following are enabled that starting and stopping task would be expected.

Can manage Enterprise Vault Exchange Journaling tasks
Can manage Enterprise Vault Exchange Mailbox tasks
Can manage Enterprise Vault services
Can manage Enterprise Vault tasks

You could uncheck those and see if that is what you want.

[GabeV · Accepted solution]

Hi Scott,

I'd try removing these three ops and confirm if you can still start/stop the tasks:

Can manage Enterprise Vault Exchange Journaling tasks
Can manage Enterprise Vault Exchange Mailbox tasks
Can manage Enterprise Vault tasks

I hope this helps

[GabeV]

Also, check out this post:

https://www-secure.symantec.com/connect/forums/ev-read-only-role-lets-me-create-and-delete-archives

[Scott__Hastings]

Thank for the help. i'll lab this out and let you know the results.

[Rob_Wilcox1]

I think it would be great to have something like a built-in read-only user added in to the product - has anyone added that to the Ideas section?

[Scott__Hastings]

Not to my knowledge Rob.

I removed there roles:

Can manage Enterprise Vault Exchange Journaling tasks
Can manage Enterprise Vault Exchange Mailbox tasks
Can manage Enterprise Vault services
Can manage Enterprise Vault tasks

and now I can't see the the tasks and services.