Forum Discussion

Tacobell's avatar
Tacobell
Level 4
15 years ago

How to Grant permissions on all vaulted mailboxes to a specific user

Hello, I've been asked to grant a couple of users full access to the Vault. They should be able to access everyone's emails using archive explorer. How do I do this? Alexis Crawford
Enterprise Vault
Information Governance
  • TonySterling's avatar
    TonySterling
    15 years ago

    If it is for all archives use EVPM


    http://support.veritas.com/docs/321592

    How to give permissions to an archive using Enterprise Vault Policy Manager (EVPM)
    Details:

    This can be achieved by creating an EVPM script, specifying the particular details and running it against the affected archive.
     
    Modify the script below to match the particular DirectoryComputerName, SiteName and mailbox distinguished name.
     
    Edit the file in Notepad and save in UNICODE format, with an .ini extension.
     
    [Directory]
    DirectoryComputerName=kvsvault
    SiteName=archivesite
    [ArchivePermissions]
    ArchiveName = john doe
    GrantAccess = read write delete, ourdomain\smith
     
    ArchiveName
    Mandatory. Identifies the archive to which the permission settings are applied.
    If there are multiple folders with the same name and you specify a name, Policy Manager modifies only the first one that it finds. In this case, you must use archive IDs to specify the archives.
    Possible values:
    The name of an archive
    An archive ID
    ALL (permissions are applied to all journal, shared, and mailbox archives in the specified vault site)
    ALL_JOURNAL (permissions are applied to all journal archives)
    ALL_SHARED (permissions are applied to all shared archives)
    ALL_MAILBOX (permissions are applied to all mailbox archives)
     
    GrantAccess
    Optional. Grants to the specified Windows accounts the specified access to the archive.
    The new values supplement any existing access rights. You can have many occurrences of GrantAccess within the same [ArchivePermissions] section.
    Possible values:
    A list of permissions, followed by a comma and then a comma-delimited list of groups or accounts that are granted the specified permissions. Permissions can be any of read, write, and delete, followed by a comma. For example, to grant read and write access to ourdomain\smith:
    GrantAccess = read write, ourdomain\smith
     
    Refer to the policy manager to obtain more information on using EVPM

TonySterling's avatar
TonySterling
Moderator
15 years ago

If it is for all archives use EVPM


http://support.veritas.com/docs/321592

How to give permissions to an archive using Enterprise Vault Policy Manager (EVPM)
Details:

This can be achieved by creating an EVPM script, specifying the particular details and running it against the affected archive.
 
Modify the script below to match the particular DirectoryComputerName, SiteName and mailbox distinguished name.
 
Edit the file in Notepad and save in UNICODE format, with an .ini extension.
 
[Directory]
DirectoryComputerName=kvsvault
SiteName=archivesite
[ArchivePermissions]
ArchiveName = john doe
GrantAccess = read write delete, ourdomain\smith
 
ArchiveName
Mandatory. Identifies the archive to which the permission settings are applied.
If there are multiple folders with the same name and you specify a name, Policy Manager modifies only the first one that it finds. In this case, you must use archive IDs to specify the archives.
Possible values:
The name of an archive
An archive ID
ALL (permissions are applied to all journal, shared, and mailbox archives in the specified vault site)
ALL_JOURNAL (permissions are applied to all journal archives)
ALL_SHARED (permissions are applied to all shared archives)
ALL_MAILBOX (permissions are applied to all mailbox archives)
 
GrantAccess
Optional. Grants to the specified Windows accounts the specified access to the archive.
The new values supplement any existing access rights. You can have many occurrences of GrantAccess within the same [ArchivePermissions] section.
Possible values:
A list of permissions, followed by a comma and then a comma-delimited list of groups or accounts that are granted the specified permissions. Permissions can be any of read, write, and delete, followed by a comma. For example, to grant read and write access to ourdomain\smith:
GrantAccess = read write, ourdomain\smith
 
Refer to the policy manager to obtain more information on using EVPM