02-13-2013 06:03 PM
Hello, I was wondering, if a user is assigned mutliple roles in EV, does the most restrictive permission become effective, like NTFS permissions & Exchange 2010 RBAC? The scope of this question is only for Exchange archiving.
Thanks!
Solved! Go to Solution.
02-13-2013 06:33 PM
OK So i just tested
1. Added my user to PST Admin only
2. Opened up the vault admin console, expand out archives, can't see any archives or any containers
3. Opened up the VAC as the evadmin and added my user to Power Administrator
4. Now the user is in the PST Administrator (most restrictive) and Power Admin (least restrictive)
5. Opened up the vault admin console, all options are now available
So in short, the least restrictive takes precent
Same as if you were to be a local admin on a machine as well as a Backup Admin, your local admin rights will override the backup admin rights
02-13-2013 06:14 PM
Honestly off the top of my head I don't know, but i will test , and it should be easy to test
logically speaking i think if you are say a PST admin and a Power Admin, your Power Admin rights will override that of the PST Admin
02-13-2013 06:33 PM
OK So i just tested
1. Added my user to PST Admin only
2. Opened up the vault admin console, expand out archives, can't see any archives or any containers
3. Opened up the VAC as the evadmin and added my user to Power Administrator
4. Now the user is in the PST Administrator (most restrictive) and Power Admin (least restrictive)
5. Opened up the vault admin console, all options are now available
So in short, the least restrictive takes precent
Same as if you were to be a local admin on a machine as well as a Backup Admin, your local admin rights will override the backup admin rights