0 votes

How can I allow manager of distribution group to edit just email aliases (proxy addresess) of that group? Not the primary SMTP address.

by (1.1k points)

1 Answer

0 votes
by (213k points)

Hello,

Email Proxy Addresses is a solid property and there is no possibility to set permissions over part of it. As a workaround, you can use a PowerShell script in a Business Rule triggering Before modifying Exchange properties of a user to set the primary SMTP address back or cancel the whole update if the address was changed. For an example, have a look at the following script from our repository: https://www.adaxes.com/script-repository/make-primary-smtp-addresses-unchangeable-s412.htm. Should you have any difficulties adjusting the script to meet your needs, please, clarify the desired workflow in all the possible details and we will help you.

0

So there is no possibility to show user just some aliases, so primary SMTP would be hidden? And therefore user cannot modify it? Maybe through some custom form list?

+1

Hello,

Unfortunately, there is no such possibility. As a workaround, you can configure a synchronization between a custom multi-value attribute (e.g. CustomAttributeTextMultiValue1) and secondary SMTP addresses and allow users to modify the custom attribute. With this approach the users will be able to modify only the duplicates of the secondary SMTP addresses. The solution will work only in Adaxes, its maintenance will be quite difficult and the Email Proxy Addresses property updates performed via third-party tools will be displayed to the users with a delay. If the solution meets your needs, we will provide detailed instructions.

Related questions

0 votes
1 answer

Is is possible through Security Roles, or some other mechanism, to allow managers to be able to edit Active Directory data (through the Web Interface) for only their direct reports and no other users?

asked Mar 23, 2015 by yobhod (740 points)
0 votes
1 answer

I have setup a form to allow HR to edit some details on AD accounts. Currently the scope is limted to only AD object under one pre-chosen OU. The other option is an ldap filter. How can I allow this action to display user accounts from two seperate OU

asked Nov 18 by ice-dog (940 points)
0 votes
1 answer

hello, I have somethings like this : #Start the process on the remote machine $Context.LogMessage("Get statistivcs on %cn%", "Information") $Server = New-PSSession -ComputerName ... main script so I can see $a in $Context.LogMessage. is that possible? Thanks.

asked Feb 13, 2018 by tentaal (5.2k points)
0 votes
1 answer

With Active Directory Users and Computers, I can add group members by copying a list of usernames and pasting them into the Add Members dialog box. This is very quick and easy. How can I do this with Adaxes? It seems that I can only add one member at a time.

asked Feb 24, 2017 by abarker5 (280 points)
0 votes
1 answer

We have a customized the help desk security role to allow only resetting passwords and unlocking accounts. We don't want them to be able to enable accounts that are disabled ... writing to certain "account options"? It seems that its an all or nothing setting.

asked Nov 14 by mark.it.admin (480 points)
2,031 questions
1,806 answers
5,156 comments
1,016 users