Using permissions to control access

When you install or upgrade to Enterprise Vault 8.0, only the Vault Service account has access to the Administration Console. You can then use the Vault Service account to assign administrative roles as required.

An administrator in any given role has access to all Administration Console containers that are relevant to that role. For example, a Messaging Administrator has access to every Exchange Server and Domino server in the Enterprise Vault Site.

You can assign administrator permissions to grant or deny access to individual containers in the Administration Console. For example, you can grant an administrator access to a single Exchange Server computer.

You can assign permissions to grant or deny access to any of the following Administration Console containers:

As soon as you modify a container's permissions, access to that container and its contents is controlled by the list you defined. The only exception to this is that the Vault Service account always has access.

For example, a Messaging Administrator who does not have access to a particular Exchange Server cannot enable mailboxes on that Exchange Server. This is because the Enable Mailbox wizard does not allow the administrator to list the mailboxes on that Exchange Server.

If you need to return to the state in which all administrators have access to a container, you must delete all entries in the administrator permissions list for that container.

To grant or deny permission to access a container

  1. Using Vault Service account, start the Administration Console.

  2. In the Administration Console, right-click the file server, Exchange Server, SharePoint Virtual Server, or Enterprise Vault server to which you want to apply permissions and, on the shortcut menu, click Properties.

  3. Click the Admin Permissions tab. The list shows the specific users or groups who have been granted or denied permission to administer this computer.

  4. If you want to add an entry to the list, click Add and then proceed as follows:

    • If you are adding the first entry on the list, there is a warning that adding an entry to the list restricts access to those users with Grant access. Click OK.

    • In the Add Users and Groups window, add the users or groups to whom you want to grant or deny access to the container. Click OK.

      The Admin Permissions list now shows the users and groups you have added, with a Grant and Deny option next to each.

  5. If you want to remove an entry from the list, click the entry to select it and then click Remove.

  6. For each user and group, select Grant to grant access to this container, or Deny to deny access to this container, as required.

  7. If you need to delete an entry from the list

  8. Click OK to close Admin Properties.

    If you have removed all entries from the list there is a warning that all administrators in a role that allows access to this container now have access. Click OK.