Configuring access control

By default, an Active Directory (AD) user can browse and search only through his emails. Through the Access Control page, you can configure the full access group, group managers and user access control.

When you configure an AD group as the full access group, the users forming part of that group can browse and search through all the emails stored in all the archive stores. You should carefully select the AD group you want to grant full access rights, since archived emails may contain sensitive and confidential information. To configure the full access group, read the ‘Configuring the full access group’ section below.

Group managers are AD users that have a management or supervisory role in your organization. If you configure an AD user as a group manager of a particular AD group, the AD user will be able to browse and search through the emails of all the users forming part of that AD group. To configure group managers read the ‘Configuring group managers’ section below.

Through the user access control feature, you can grant a specific AD user access to browse and search the emails of another AD user. This feature comes in handy when you want to for example, grant an AD user access to the emails of another user that no longer forms part of your company, and whose AD account was deleted. To configure user access control read the ‘Configuring user access control’ section below.

Configuring the full access group

To configure the full access group, follow these steps:

1. Load the GFI MailArchiver configuration as shown in the ‘Introduction to the Configuration’ section earlier in this chapter.

2. Click on the GFI MailArchiver > Configuration > Access Control node, in the left navigation pane.

3. Under Full Access Group, select an AD group from the Full Access Group list.

Screenshot 70 – Access control page

4. Click Save Settings.

Configuring group managers

To configure an AD user as a group manager, follow these steps:

1. Load the GFI MailArchiver configuration as shown in the ‘Introduction to the Configuration’ section earlier in this chapter.

Screenshot 71 - Selecting an AD user from the manager list

2. Click on the GFI MailArchiver > Configuration > Access Control node, in the left navigation pane.

3. Under Group Managers, select an AD user from the Manager list.

4. Select the AD group that the AD user selected in step 3 manages, from the Has access to Group list. In this way, you are giving the AD user selected in step 3, the privilege to browse and search through the emails of all the AD users, forming part of the AD group you selected.

5. Click Add Manager.

Screenshot 72 - Group manager configured

6. Repeat steps 3 to 5 to add more group managers to the list.

7. Click Save Settings.

Configuring user access control

To grant an AD user the privilege to browse and search through the emails of another AD user, follow these steps:

1. Load the GFI MailArchiver configuration as shown in the ‘Introduction to the Configuration’ section earlier in this chapter.

2. Click on the GFI MailArchiver > Configuration > Access Control node, in the left navigation pane.

3. Under User Access Control, select an AD user from the User list.

Screenshot 73 - Selecting an AD user from the user list

4. From the Has access to User list, select the AD user that the AD user selected in step 3 can access. In this way, you are giving the AD user selected in step 3, the privilege to browse and search through the emails of the AD user you select.

NOTE: Users whose AD account is deleted, will have (Deleted) displayed next to the account name in the Has access to User list.

Screenshot 74 - User access control configured

5. Click Add User.

6. Repeat steps 3 to 5 to add more user access control entries to the list.

7. Click Save Settings.

Removing Managers or Users from the lists

To remove AD users listed either under Group Managers or User Access Control, follow these steps:

1. Load the GFI MailArchiver configuration as shown in the ‘Introduction to the Configuration’ section earlier in this chapter.

2. Click on the GFI MailArchiver > Configuration > Access Control node, in the left navigation pane.

3. Click the button to the right of the AD user you want to remove from the list.

4. Repeat step 3 to remove more AD users.

5. Click Save Settings.