Phone Lines icon GFI Support

Articles in this section

Configuration of Roles and Permissions for Access in GFI Archiver

Author: Timothy Parker Updated

Overview

Administrators need to set configuration for certain roles within the Archiver product for functionality such as viewing all user archives. Each role and its configuration can be viewed below to set permissions, such as providing access to mailboxes, for domain groups. 

 

Diagnosis

 

Administrators need to know what account to log in as so they can search for user emails. Administrators are unable to search or access the mailbox for any users, no mailboxes appear, or teams running reports are unable to access required sections of Archiver. Administrators may only see the mailbox for the currently logged in user when they are expecting to see all mailboxes. 

 

Solution

  • GFI Archiver ships with a set of roles that can be assigned to selected users to grant them the required permissions to access specific functions within GFI Archiver.
  • Active Directory or GFI Directory users that have not been assigned a role and do not make part of any group are assigned to the default role automatically. This role can neither be deleted nor modified.
  • After GFI Archiver is installed (or upgraded), access is controlled according to Active Directory or GFI Directory permissions.
  • Active Directory or GFI Directory permissions are overridden when new roles are assigned to a user or group using the GFI Archiver Roles and Permissions feature.
  • The initial configured set of roles shipped with GFI Archiver are:
    • Administrator
    • Auditor
    • Full Access and Administrator
    • Full Access
    • User (Default)

  • These roles can be customized as required or deleted (except for the default role).

 

 

Managing Configured Roles and Permissions

Follow these steps to view existing roles and permissions and manage them:

  1. Go to Configuration.
  2. Click Roles and Permissions.
    • The Roles and Permissions page is divided into two windows.

      roles01.png

  3. Click on each role view the permissions set for that role.

  4. Use options under 'Manage Roles and Permissions' to:
    • Add new Role:  Click to add a new role.
    • Configure Role: Highlight an existing role, then click to edit role permissions.
    • Delete Role: Select an existing role and click to remove the role. Users assigned to that role are reverted to the default role. 

  5. Use options under 'Manage Role Assignments' to:
    • Assign
    • Edit
    • Remove
    • Change Priority
    • Filter by
    • Find Role
    • All Roles

 

roles02.png

 

 

Manage Role Assignments

Refer to the table below to learn about options under 'Manage Role Assignments':

Option Description
Assign
  • Click to assign a role to a user or group.
Edit
  • Highlight an existing user or group and click to edit the role assignment.
Remove
  • Select an existing user or group and click to remove role assignment. Users assigned to that role are reverted to the default role.
Change Priority
  • Changing priorities is only allowed for groups.

  • Click to open the Change group priority window and change the order of how GFI Archiver checks for permissions assigned to users. Select an existing Group role assignment and click to increase or decrease priority.

  • GFI Archiver first checks if the user is assigned a role. In that case, the individual role assignment has priority.

  • If the user is not mapped to any role, GFI Archiver then checks if the user is part of a group and grants the permissions assigned to the group.

  • The user can be part of more than 1 group. In that case, the group with the highest priority takes precedence.
Filter By
  • Filter by User or by Group.
Find Role
  • Use Find Role button to input a user or group in a dialog and view Roles and Permissions for selected user or group.
All Roles
  • Select a Role from the drop-down list to filter the view by Role.

 

Related Article

Configuring Full Access Roles in GFI Archiver

 

 

Related articles