Delegated administrators

Make an account a global administrator, the administrator of a domain, or authorised only for certain tasks (password resets, distribution lists); preset roles grant the right permissions in one step.

Global administratorAdmin console › Tools and Migration › Delegated Admins

Assigning a domain administrator

1. Click Tools and Migration › Delegated Admins in the left tree and press New Admin on the toolbar. The Promote to Delegated Admin window opens.
2. Enter the account in Account e-mail (for example it.admin@zpe.profelis.net), leave Scope on Domain and choose the domain in the Domain list.
3. Under Capabilities, tick the Full Domain Admin preset.
4. Press Apply.

The Promote to Delegated Admin window

The administrator appears in the list with the Domain(s) and Capabilities columns. They can sign in to the console for the selected domain only and get no global rights. Select a row and press View Grants to see the raw list of rights granted (Raw Grants).

The Delegated Admins list

Password resets only

Choose the Reset passwords only (no create/delete) preset. The operator can change the password of existing accounts; they cannot create, delete or edit accounts.

An administrator for the members of a group

1. In the Promote to Delegated Admin window, choose Group (distribution list) as the Scope.
2. Enter the group address (a distribution list, for example sales@zpe.profelis.net) and tick Group: manage member accounts (no create) or Group: reset member passwords only; Apply.
3. When the administrator signs in to the console they see only the group's current members.

Group scope

Group scope

A group-scoped administrator cannot create accounts (that is a domain right); you link a new user to the administrator by adding them to the group. A group administrator also cannot add aliases to members (creating an alias is a domain right). Dynamic groups are not supported.

Revoking

Select the row in the list and press Remove Rights on the toolbar; the related rights and administrator attributes are removed. To change an administrator's preset use Edit Selected; applying a preset again with Apply completes any missing rights.