cancel
Showing results for 
Search instead for 
Did you mean: 

Role based administration in EV 10

rnt123
Level 5

Hello, I was wondering, if a user is assigned mutliple roles in EV, does the most restrictive permission become effective, like NTFS permissions & Exchange 2010 RBAC? The scope of this question is only for Exchange archiving.

Thanks!

1 ACCEPTED SOLUTION

Accepted Solutions

JesusWept3
Level 6
Partner Accredited Certified

OK So i just tested

1. Added my user to PST Admin only
2. Opened up the vault admin console, expand out archives, can't see any archives or any containers
3. Opened up the VAC as the evadmin and added my user to Power Administrator
4. Now the user is in the PST Administrator (most restrictive) and Power Admin (least restrictive)
5. Opened up the vault admin console, all options are now available

So in short, the least restrictive takes precent
Same as if you were to be a local admin on a machine as well as a Backup Admin, your local admin rights will override the backup admin rights

https://www.linkedin.com/in/alex-allen-turl-07370146

View solution in original post

2 REPLIES 2

JesusWept3
Level 6
Partner Accredited Certified

Honestly off the top of my head I don't know, but i will test , and it should be easy to test
logically speaking i think if you are say a PST admin and a Power Admin, your Power Admin rights will override that of the PST Admin

https://www.linkedin.com/in/alex-allen-turl-07370146

JesusWept3
Level 6
Partner Accredited Certified

OK So i just tested

1. Added my user to PST Admin only
2. Opened up the vault admin console, expand out archives, can't see any archives or any containers
3. Opened up the VAC as the evadmin and added my user to Power Administrator
4. Now the user is in the PST Administrator (most restrictive) and Power Admin (least restrictive)
5. Opened up the vault admin console, all options are now available

So in short, the least restrictive takes precent
Same as if you were to be a local admin on a machine as well as a Backup Admin, your local admin rights will override the backup admin rights

https://www.linkedin.com/in/alex-allen-turl-07370146