Video Screencast Help

Request for Enhanced Delegation functionality within Enterprise Vault

Created: 17 Jul 2011 • Updated: 27 Sep 2011 | 2 comments
Anthony1st's picture
2 Agree
0 Disagree
+2 2 Votes
Login to vote
Status: In Review

Although Enterprise Vault offers granularity of administrative delegation within Enterprise Vault, it's fairly coarse in terms of the pre-defined roles. It's also somewhat unintuitive when trying to figure out what rights map through to what you can and can't do within the console.

For example, I wanted to give helpdesk staff the rights to provision and enable/disable archives as well as being able to change permissions, but not to be able to delete an archive. I managed to get this going, but it was a torturous process of trawling through the (seemingly) hundreds of tasks and operations to figure out how to make this work. To get what I wanted, I needed to give users (amongst other things) "Can Manage Mailbox Archives" but not (STO) Can administer archives. After working with it for a while I'm getting a sense of what the different Operations do and their respective prefixes, but it's all a bit opaque.

Also, when I restrict access to different parts of the admin console, it's clunky from an end-user perspective. Rather than having options grayed out when I want to give "Read-only" permissions, the options are often visible and appear that they can be changed, but then throw an error when the end user tries to make a change.

It'd be nice to have some sort of interface that maps back to the admin console layout that allows you to set the permissions on what a given set of users can do inside the console, much like what VMWare and Citrix have done inside some of their products.

Comments 2 CommentsJump to latest comment

Andy Nash's picture

Sounds like a great idea, right now I'm not sure how many customers actually use RBA aggressively... so please add additional comments and votes if you feel this is an important improvement to be made.

Regards,
--Andy 

0
Login to vote