66 Specifying Administrator Access to the Message Store

This chapter describes how to grant store privileges to the message store for your Oracle Communications Messaging Server installation. See "Managing Message Store Partitions and Adding Storage" for conceptual information.

Overview of Message Store Administrators

Message store administrators can view and monitor user mailboxes and specify access control for the message store. Store administrators have proxy authentication privileges to any service (POP, IMAP, HTTP, or SMTP), which means they can authenticate to any service using the privileges of any user. These privileges allow store administrators to run certain utilities for managing the store.

Note:

Other users might also have administrator privileges to the store. For example, some administrators may have these privileges.

Also, see "Protecting Mailboxes from Deletion or Renaming" for more information.

Adding an Administrator Entry

To add an administrator entry at the command line, enter:

msconfig set store.admins adminlist

where adminlist is a space-separated list of administrator IDs. If you specify more than one administrator, you must enclose the list in quotes. In addition, the administrator must be a member of the Service Administrator Group, in the LDAP user entry: memberOf: cn=Service Administrators,ou=Groups,o=usergroup. You must restart imapd for the system to recognize the change in store.admins.

Modifying or Deleting an Administrator Entry

To modify or delete an existing entry in the message store Administrator UID list at the command line, use the same command:

msconfig set store.admins adminlist

where adminlist is a space-separated list of administrator IDs who should be included in the modified list. If you specify more than one administrator, you must enclose the list in quotes. In addition, the administrator must be a member of the Service Administrator Group, in the LDAP user entry: memberOf: cn=Service Administrators,ou=Groups,o=usergroup. You can delete members from the list, but the modified list must contain at least one administrator ID.

You must restart imapd for the system to recognize the change in store.admins.