6 Access control and auditing
6
Access control and auditing
6.1
Configuring access control
By default, Active Directory (AD) users can browse and search only through their emails. In GFI MailArchiver, you can however configure:
•
Full access group – Enables users in AD groups to browse and search through all the emails stored in all the archive stores.
NOTE: Since emails may contain confidential information it is highly recommended to select members of this groups with extreme care.
•
Group managers – Enables users that have a management or supervisory role in your organization to browse and search through the emails of all the users forming part of that AD group.
•
User access control - Enables specific users to browse and search the emails of other users.
This feature enables, for example, to grant a user access to emails of another user who no longer forms part of your company, and whose AD account was deleted.
6.1.1
Configuring the Full Access Group
1. Select Configuration ► Access Control node.
2. From Full Access Group, select an AD group from the Full Access Group list.
Screenshot 131 – Access control page
3. Click Save Settings.
6.1.2
Configuring group managers
1. Select Configuration ► Access Control node.
Screenshot 132 - Selecting an AD user from the manager list
2. From Group Managers, select an AD user from the Manager list.
3. From the Has access to Group list select the AD group that the AD user manages. The selected AD user is granted access to browse and search through the emails of all the AD users that are part of the selected AD group.
4. Click Add Manager.
5. Repeat to add more group managers to the list.
6. Click Save Settings.
6.1.3
Configuring user access control
1. Click Configuration ► Access Control node.
Screenshot 133 - Selecting an AD user from the user list
2. From User Access Control select an AD user from the User list.
3. From Has access to User list, select the AD to access.
NOTE: Users which AD account is deleted, will have (Deleted) displayed next to the account name in the Has access to User list.
4. Click Add User.
5. Repeat to add more user access control entries to the list.
6. Click Save Settings.
6.1.4
Removing Managers or Users from the lists
To remove AD users listed under Group Managers or User Access Control:
1. Select Configuration ► Access Control node.
2. Click the button to the right of the AD user to remove from list.
3. Repeat to remove more AD users.
4. Click Save Settings.