70 Specifying Administrator Access to the Message Store

This information describes how to grant store privileges to the message store for your Oracle Communications Messaging Server installation. See "Managing Message Store Partitions and Adding Storage" for conceptual information.

Topics:

Overview

Message store administrators can view and monitor user mailboxes and specify access control for the message store. Store administrators have proxy authentication privileges to any service (POP, IMAP, HTTP, or SMTP), which means they can authenticate to any service using the privileges of any user. These privileges allow store administrators to run certain utilities for managing the store.

Note:

Other users might also have administrator privileges to the store. For example, some administrators may have these privileges.

See also "Protecting Mailboxes from Deletion or Renaming."

Adding an Administrator Entry

To add an administrator entry at the command line, enter:

msconfig set store.admins <adminlist>

where adminlist is a space-separated list of administrator IDs. If you specify more than one administrator, you must enclose the list in quotes. In addition, the administrator must be a member of the Service Administrator Group, in the LDAP user entry: memberOf: cn=Service Administrators,ou=Groups,o=usergroup. You must restart imapd for the system to recognize the change in store.admins.

Modifying or Deleting an Administrator Entry

To modify or delete an existing entry in the message store Administrator UID list at the command line, use the same command:

msconfig set store.admins <adminlist>

where adminlist is a space-separated list of administrator IDs who should be included in the modified list. If you specify more than one administrator, you must enclose the list in quotes. In addition, the administrator must be a member of the Service Administrator Group, in the LDAP user entry: memberOf: cn=Service Administrators,ou=Groups,o=usergroup. You can delete members from the list, but the modified list must contain at least one administrator ID.

You must restart imapd for the system to recognize the change in store.admins.