Video Screencast Help

Read-Only access to Vault Admin Console Role

Created: 17 Aug 2012 • Updated: 02 Oct 2012 | 8 comments
ia01's picture
3 Agree
1 Disagree
+2 4 Votes
Login to vote
Status: Reviewed

 

There should be a default Role defined in Authorization Manager for allowing somone just read-only view to everything within VAC that an admin can see. But not permission to change any settings or add / remove anything. It is really fleaky to configure this role.

Also what are the various tag {DIR},  {STO}, {REP} etc. means? What are the differrence between "Can Administer"and "Can Manage"?

I think these needs to be defined clearly in documentation.

EV version is 10.0.1

Comments 8 CommentsJump to latest comment

Rob.Wilcox's picture

There is a section in the Admin Guide (starting on page 26?) which talks about Role Based Administration.

DIR, STO, REP are different components of Enterprise Vault.

Can Administer =

Can Manage = 

To me, manage means you can stop/start/edit, etc.  Administer means you can create new, delete, etc (on top of manage)

 

But in the end I agree, it should be better documented.

+1
Login to vote
ia01's picture

If Can Manage = manage means you can stop/start/edit, etc.  Can Administer = Administer means you can create new, delete, etc (on top of manage), where does Read Only stands here?

Really need a pure "Read-Only" role as quite a few of our customers have asked for this facility so far.

0
Login to vote
Rob.Wilcox's picture

Well, I was able to build up 'something' like that in RBA.  But ...

 

a/ It's not easy

b/ It's not pretty -- in order to get access to some stuff you allow dialogs to be editable, and get a general 'access denied' error when try to click on Ok on the dialogs.

 

I would suggest checking the Ideas section of this forum, and logging a request there.  It does seem 'reasonable' to request something like this, after all there are things already like Exchange View Only Administrator and so on ... so it's not like doing this would be unique, or set a precedent.

0
Login to vote
Ksimir's picture

I agree with this suggestion. We need something similar to Exchange View Only Administrator.

Rob, I will be interested in your solution. Could you provide me more details about how you set your permissions to get something similar to view only admin?

Thank you!
Samir

0
Login to vote
Rob.Wilcox's picture

To be hones, it was very much trial.. and lots of error.  I didn't manage to get 'completely' the same as Exchange View Only Admin - I mean that's the purpose of this idea in the forum, to request that the feature be truly added to the product.

 

In the meantime though, this is what I set up....

 

+1
Login to vote
Andy Nash's picture

 

We have an existing suggestion in our system for the ability to set-up a read only view of the VAC.

The ID is 1620.

I need to see a lot more intrest/justification for us to prioritise this request.

Regards,
--Andy

0
Login to vote