The roles that can be assigned to users include the right of access to applications (webmail, contacts, etc.), the right to use specific features (creating external identities, enabling email auto-forward, etc.) or administration rights to delegate certain management responsibilities (users, domain, etc.).
Users can be assigned the following roles:
Administration
- System manager: Allows users to manage all aspects of the BlueMind installation
- Manage system configuration: Allows users to modify the system configuration
- Manage BlueMind subscription: Allows users to install and update the BlueMind subscription
- Manage domains: Allows users to manage domain configurations and entities
- Domain administrator: Allows users to manage system information
- Manage groups: Allows users to create, update or delete groups and manage their members
- Manage group members: Allows users to add and remove group members
- Manage group sharings: Allows users to add, modify or delete sharings in a group mailbox
- Manage users: Allows users to create, update and delete users
- Manage user information: Allows users to manage user information intended to appear in the directory and in VCard exports
- Sudo (privilege elevation): Allows users to log into BlueMind in another user's place via the administration console without having to know the user's password
- Manage user subscriptions: Allows users to modify users subscriptions
- Manage user devices (ActiveSync): Allows users to manage access authorisations for user devices (ActiveSync)
- Manage user mail identities: Allows users to create, modify or delete user mail identities
- Manage user passwords: Allows users to modify user passwords
- Manage user settings: Allows users to modify personal user settings
- Manage user sharings: Allows user to modify user sharing settings
- Manage domain calendars: Allows users to create, modify and delete domain calendars
- Manage domain calendar sharings: Allows users to modify domain calendar sharing
- Manage domain address books: Allows users to create, modify, delete domain address books and how they are shared
- Manage domain address books sharings: Allows users to modify domain address books sharing
- Manage organizational units: Allows users to create and delete organizational units
- Manage mailshares: Allows users to create, modify and delete mailshares and how they are shared
- Manage mailshare sharings: Allows users to modify mailshare sharing
- Manage domain external LDAP address books: Allows users to create, modify and delete domain address books synchronised with external LDAP directories
- Manage resources: Allows users to create, modify and delete resources and how they are shared
- Manage resource sharings: Allows users to modify resource sharing
- Manage resource types: Allows users to create and delete resource types
- Manage servers: Gives access to "Application servers" in the administration console which is used to add or remove servers and modify server settings and roles
- Manage domain max values: Allows users to set and modify max domain values
- Monitoring console: Gives access to the console which is used to check services and server statuses
- Admin console: Allows users to use administration console's web application - required for all management roles
Cloud
- Linked attachments: Allows users to use the linked attachments service so that email attachments are shown to recipients as download links
- Drive: Gives access to the filechooser to find and send again linked attachements previously sent and stored on the server
General
- Calendar and Tasks: Allows users to use tasks and calendar synchronization and web applications
- API docs integration: Allows users to have the api docs application integrated in their BlueMind: an "API Docs" link is added to BlueMind's top toolbar next to the other applications
- Change own mail filters: Allows users to manage their personal incoming mail filters
- Change own mail identities: Allows users to create, modify and delete their personal mail identities
- Change own settings: Allows users to change their personal settings
- Change own password: Allows users to change their personal passwords
- Manage own devices (ActiveSync): Allows users to manage access to their personal devices (ActiveSync)
NB: to date, there is no UI in users' BlueMind settings. This feature allows script-based actions using users' API key (see User settings - chapter 6 API keys) - Webmail and Contacts: Allows users to use the mail service, the webmail application, contact synchronization and the web contact application
- Instant messaging: Allows users to use the instant messaging web application and the XMPP service with external clients
- Change own information: Allows users to modify their personal information for the directory or VCard exports
NB: to date, there is no UI in users' BlueMind settings this feature allows script-based actions using users' API key (see User settings - chapter 6 API keys) - Mail forwarding: Allows users to forward incoming emails to internal or external email addresses automatically
- Telephony: Allows users to use telephony integration in all web applications
Mail
- External identity: Allows users to create identities with external mail addresses
To find out more about managing these rights, go to the dedicated pages Users and Delegated Administration
