This section provides a task overview and checklists for the tasks required to assign permissions specific to your email environment. This section includes:
◆ Task overview... 53 ◆ General permissions... 54 ◆ Microsoft Exchange permissions... 55 ◆ IBM Lotus Domino permissions... 57
General permissions
This section describes general permissions associated with EMC SourceOne Email Management.
Table 4 Accounts and permissions - permissions assignment
Done
Environment
/System Task Details Validation
MIME drop directories Configure drop directory permissions for MIME managementFor drop directories into which you place MIME messages to be archived by EMC SourceOne: • Sharing tab - Configure the security group with Full
Control permissions to the share
• Security tab - Configure the security group with Full Control permissions to the share
1. Log in to a system as the primary service account. 2. Access the share
and create a text file.
3. Delete the text file.
NSF drop directories Configure drop directory permissions for NSF managementFor drop directories into which you place NSF files to be archived by EMC SourceOne:
• Sharing tab - Configure the security group with Full Control permissions to the share
• Security tab - Configure the security group with Full Control permissions to the share
1. Log in to a system as the primary service account. 2. Access the share
and create a text file.
3. Delete the text file.
PST drop directories Configure drop directory permissions for PST managementFor drop directories into which you place PST files to be archived by EMC SourceOne in a single Exchange forest configuration:
• Sharing tab - Configure the security group with Full Control permissions to the share
• Security tab - Configure the security group with Full Control permissions to the share
Note: See the EMC SourceOne Email Management
Administration Guide for considerations in a Exchange resource forest configuration.
1. Log in to a system as the EMC SourceOne primary service account. 2. Access the share
and create a text file.
Microsoft Exchange permissions
This section provides a checklist for the tasks required to configure permissions in Microsoft Exchange.
Table 5 Accounts and permissions - Microsoft Exchange (1 of 3)
Done Task Details Validation
Create Exchange journaling mailboxesCreate one or more Exchange journaling mailboxes. A journaling user account is associated with an Exchange journaling mailbox that collects messages generated on a mailbox store. Most configurations will consist of several journaling users and mailboxes.
Note: Envelope journaling is required for EMC SourceOne. See “Microsoft Exchange environment requirements” on page 70 for details.
A journaling user account is created in Active Directory and must have the following characteristics:
• Member of Domain Users group
• Password does not need to be changed at next login • Password does not expire
• Account does not expire Journaling users/mailboxes ___________________________________ ___________________________________ ___________________________________ Ensure mailboxes created.
Configure general Exchange permissionsGrant the EMC SourceOne primary service account and the EMC SourceOne Admins group the following permissions:
- Exchange View-Only Administrator (at the Organization level)
Note: If using Exchange 2010 in a mixed environment (which includes
both Exchange 2010 and a previous Exchange version), you must explicitly configure these permissions in Exchange 2010, as they do not automatically propagate over from previous Exchange versions.
1. Start the EMC SourceOne Console. 2. Check that the
administrator can view the mail server hierarchy from the EMC SourceOne Console.
Configure permissions for journaling mailboxesGrant the EMC SourceOne primary service account access rights to each journaling mailbox.
Exchange 2010 Server
• Full mailbox access
Exchange 2007 Server
• Full mailbox access
Exchange 2003 Server
• Delete mailbox storage • Read permissions • Change permissions • Full mailbox access
Test journaling mailbox access:
1. Open Outlook as the primary service account. 2. Open the journal
mailbox Inbox folder. 3. Add and delete a
message.
Configure permissions for user mailboxesTo support storage management (which requires a higher level of permissions to access and manipulate mailbox contents), configure the following permissions (depending on Exchange version).
Exchange 2010
Grant the EMC SourceOne primary service account the following extended permissions:
• Receive As
Note: In a mixed environment (Exchange 2010 and a previous version of
Exchange), grant these permissions at the mailbox database level, targeting only the mailboxes on Exchange 2010. You can then use the permissions described in the following section for mailboxes hosted on previous Exchange versions.
Exchange 2003 or 2007
Grant the EMC SourceOne primary service account the following extended permissions:
• Receive As
Storage management: 1. Open Outlook as the
primary service account. 2. Open a test user
mailbox Inbox folder. 3. Add and delete a
message. Table 5 Accounts and permissions - Microsoft Exchange (2 of 3)
IBM Lotus Domino permissions
This section provides a checklist for the tasks required to configure permissions in IBM Lotus Domino.
Review Exchange 2010considerations
Review the following considerations if using EMC SourceOne in an environment that includes Microsoft Exchange 2010:
• Exchange 2010 replaced the permissions model used in Exchange 2007 with a Role Based Access Control (RBAC) permissions model. Refer to the Microsoft Exchange 2010 documentation set for more information.
• Exchange 2010 takes two hours to update the permissions cache. Restart the Microsoft Exchange Information Store after applying permissions to activate the changes.
None. Table 5 Accounts and permissions - Microsoft Exchange (3 of 3)
Done Task Details Validation
Table 6 Accounts and permissions - IBM Lotus Domino
Done Task Details Validation
Create EMC SourceOne Lotus Notes accountThis account will later be specified on EMC SourceOne host computers to support message processing in a Domino environment.
To support all EMC SourceOne activities, configure the account with:
• Manager privileges for all users mail files • Delete access to all mailboxes
To support all EMC SourceOne activities except archiving messages based on read or unread status, restoring messages from EMC SourceOne Search, and user-directed archiving:
• Editor privileges for all users mail files • Delete access to all mailboxes Account name:
___________________________________
1. Open a user NSF file for test purposes as the EMC SourceOne Notes user. 2. Add data.
3. Delete the data.
Configure Internet address and password for Lotus Notes usersEnsure Lotus Notes users have an Internet address and password configured. This is required for Notes users to use EMC SourceOne Search.
After EMC SourceOne is installed, confirm that a Notes user can log in to EMC SourceOne Search.