Cannot view or modify emails: Admin Role required permissions

Products

• CA Identity Manager

Issue/Introduction

Unable to view or modify emails from the user console. The role allows access to perform these functions, but when attempting to search for an email the search operation returns no results.

There is an email being sent that was configured from the console using "System -> Email -> Create Email" but the email doesn't show up when searched.

Are any additional permissions (or config options) needed to view or modify existing emails?

 

Resolution

In order to manage create, modify, view and delete email policies, only the "Email Manager" role is required.

Below is the default role configuration that allows management of all the Email Policy tasks.

Modify Admin Role: Email Manager

--Profile Tab--
• = Required

•Name
Description
Enabled

Return to Search

 

--Tasks Tab--

Create Email		System	Managed E-mail
Delete Email		System	Managed E-mail
Modify Email		System	Managed E-mail
View Email		System	Managed E-mail

--Members Tab--

Member Policies

	Member Rule	Scope Rules
	who are members of ( admin role "System Manager" )	Group (all) Managed E-mail (all) User (all)
	where ( Admin roles = "Email Manager" )	Group (all) Managed E-mail (all)

 Administrators can add and remove members of this role 

Add Action

When a user is added as a member of this role, what changes occur?

(Changes must make the user meet a member rule.)

Add  to  Access roles Admin roles Binary 00 Binary 01 Binary 02 Binary 03 Binary 04 Cached Group Admin Rights Cached Group Membership CaseExact String 00 CaseExact String 01 CaseExact String 02 CaseExact String 03 CaseExact String 04 Delegators Employee Status Forgotten Password Question and Answers Integer 00 Integer 01 Integer 02 Integer 03 Integer 04 JPeg 00 JPeg 01 JPeg 02 JPeg 03 JPeg 04 Leave of Absence Legal Hold Manager Employee Number Manager Id Matching Policies Modified By SCIMMultivaluedTypes String 000 String 001 String 002 String 003 String 004 String 005 String 006 String 007 String 008 String 009

Make member of admin role "System Manager"   Add "Email Manager" to Admin roles     Add to group <group-name> [...]   Add to group <group-name> in user's organization   Set <single-value-user-attribute> to <value>   Add <value> to <multi-value-user-attribute>   Make member of access role <access-role>   Make administrator of access role <access-role>   Make member of admin role <admin-role>   Make administrator of admin role <admin-role>   Remove from group <group-name> [...]   Remove from group <group-name> in user's organization   Remove <value> from <multi-value-user-attribute>   Remove member from access role <access-role>   Remove administrator from access role <access-role>   Remove member from admin role <admin-role>   Remove administrator from admin role <admin-role>

Remove Action

When a user is removed as a member of this role, what changes occur?

(Changes must prevent the user from meeting any member rule.)

Remove  from  Access roles Admin roles Binary 00 Binary 01 Binary 02 Binary 03 Binary 04 Cached Group Admin Rights Cached Group Membership CaseExact String 00 CaseExact String 01 CaseExact String 02 CaseExact String 03 CaseExact String 04 Delegators Employee Status Forgotten Password Question and Answers Integer 00 Integer 01 Integer 02 Integer 03 Integer 04 JPeg 00 JPeg 01 JPeg 02 JPeg 03 JPeg 04 Leave of Absence Legal Hold Manager Employee Number Manager Id Matching Policies Modified By SCIMMultivaluedTypes String 000 String 001 String 002 String 003 String 004 String 005 String 006 String 007 String 008 String 009

Remove member from admin role "System Manager"   Remove "Email Manager" from Admin roles    Add to group <group-name> [...]   Add to group <group-name> in user's organization   Set <single-value-user-attribute> to <value>   Add <value> to <multi-value-user-attribute>   Make member of access role <access-role>   Make administrator of access role <access-role>   Make member of admin role <admin-role>   Make administrator of admin role <admin-role>   Remove from group <group-name> [...]   Remove from group <group-name> in user's organization   Remove <value> from <multi-value-user-attribute>   Remove member from access role <access-role>   Remove administrator from access role <access-role>   Remove member from admin role <admin-role>   Remove administrator from admin role <admin-role>

 

--Administrators Tab--

Administrators manage the members and administrators of this role.

Admin Policies

	Admin Rule	User Scope Rule	Manage Members	Manage Administrators
	where ( Admin roles = "Email Administrator" )	(all)
	who are members of ( admin role "System Manager" )	(all)

 Administrators can add and remove administrators of this role 

Add Action

When a user is added as an administrator of this role, what changes occur?

(Changes must make the user meet an admin rule.)

Add  to  Access roles Admin roles Binary 00 Binary 01 Binary 02 Binary 03 Binary 04 Cached Group Admin Rights Cached Group Membership CaseExact String 00 CaseExact String 01 CaseExact String 02 CaseExact String 03 CaseExact String 04 Delegators Employee Status Forgotten Password Question and Answers Integer 00 Integer 01 Integer 02 Integer 03 Integer 04 JPeg 00 JPeg 01 JPeg 02 JPeg 03 JPeg 04 Leave of Absence Legal Hold Manager Employee Number Manager Id Matching Policies Modified By SCIMMultivaluedTypes String 000 String 001 String 002 String 003 String 004 String 005 String 006 String 007 String 008 String 009

Add "Email Administrator" to Admin roles   Make member of admin role "System Manager"     Add to group <group-name> [...]   Add to group <group-name> in user's organization   Set <single-value-user-attribute> to <value>   Add <value> to <multi-value-user-attribute>   Make member of access role <access-role>   Make administrator of access role <access-role>   Make member of admin role <admin-role>   Make administrator of admin role <admin-role>   Remove from group <group-name> [...]   Remove from group <group-name> in user's organization   Remove <value> from <multi-value-user-attribute>   Remove member from access role <access-role>   Remove administrator from access role <access-role>   Remove member from admin role <admin-role>   Remove administrator from admin role <admin-role>

Remove Action

When a user is removed as an administrator of this role, what changes occur?

(Changes must prevent the user from meeting any admin rule.)

Remove  from  Access roles Admin roles Binary 00 Binary 01 Binary 02 Binary 03 Binary 04 Cached Group Admin Rights Cached Group Membership CaseExact String 00 CaseExact String 01 CaseExact String 02 CaseExact String 03 CaseExact String 04 Delegators Employee Status Forgotten Password Question and Answers Integer 00 Integer 01 Integer 02 Integer 03 Integer 04 JPeg 00 JPeg 01 JPeg 02 JPeg 03 JPeg 04 Leave of Absence Legal Hold Manager Employee Number Manager Id Matching Policies Modified By SCIMMultivaluedTypes String 000 String 001 String 002 String 003 String 004 String 005 String 006 String 007 String 008 String 009

Remove "Email Administrator" from Admin roles   Remove member from admin role "System Manager"     Add to group <group-name> [...]   Add to group <group-name> in user's organization   Set <single-value-user-attribute> to <value>   Add <value> to <multi-value-user-attribute>   Make member of access role <access-role>   Make administrator of access role <access-role>   Make member of admin role <admin-role>   Make administrator of admin role <admin-role>   Remove from group <group-name> [...]   Remove from group <group-name> in user's organization   Remove <value> from <multi-value-user-attribute>   Remove member from access role <access-role>   Remove administrator from access role <access-role>   Remove member from admin role <admin-role>   Remove administrator from admin role <admin-role>

Return to Search

 

 

--Owners Tab--

Owners can modify the role.

Owner Rules

	Owner Rule
	who are members of ( admin role "System Manager" )

Current Owners

imadmin	imadmin	admin	im	im

Return to Search