There are exceptions. Domain administrators can configure IP-based policies, the global block list, the global safe list, the blocklist action, and the global Bayesian database. If you do not want to allow this, do not provide Read-Write permission to those categories in domain administrators’ access profiles. |
Maintenance |
Monitor except for the Personal quarantine tab |
System except for the Administrator tab |
Mail Settings except for the domain, its subdomains, and associated domains |
User > User > PKI User |
Policy > Access Control > Receive Policy > Access Control > Delivery |
Profile > Authentication |
AntiSpam except for AntiSpam > Bayesian > User and AntiSpam > Block/Safe List |
Email Archiving |
Log and Report |
Access control area name | Grants access to (For each config command, there is an equivalent get/show command, unless otherwise noted. config access requires write permission. get/show access requires read permission.) | |
In the web UI | In the CLI | |
Block/Safe List | block-safe-list | Monitor > Endpoint Reputation > Auto Blocklist Maintenance > AntiSpam > Block/Safe List Maintenance AntiSpam > Block/Safe List ... |
N/A | ||
Quarantine | quarantine | Monitor > Quarantine ... AntiSpam > Quarantine > Quarantine Report AntiSpam > Quarantine > System Quarantine Setting AntiSpam > Quarantine > Control Account |
config antispam quarantine-report config mailsetting systemquarantine | ||
Policy | policy | Monitor > Mail Queue ... Monitor > Greylist ... Monitor > Sender Reputation > Display Mail Settings > Domains > Domains Mail Settings > Proxies > Proxies User > User ... Policy ... Profile ... AntiSpam > Greylist ... AntiSpam > Bounce Verification > Settings AntiSpam > Endpoint Reputation ... AntiSpam > Bayesian ... |
config antispam greylist exempt config antispam bounce-verification key config antispam settings config domain config mailsetting proxy-smtp config policy ... config profile ... config user ... | ||
Archive | archive | Email Archiving Monitor > Archive |
config archive | ||
Greylist | greylist | Monitor > Greylist ... AntiSpam > Greylist ... |
config antispam greylist... get antispam greylist ... | ||
Others | others | Monitor > System Status ... Monitor > Archive > Email Archives Monitor > Log ... Monitor > Report ... Maintenance ... except the Block/Safe List Maintenance tab System ... Mail Settings > Settings ... Mail Settings > Address Book > Address Book User > User Alias > User Alias User > Address Map > Address Map Email Archiving ... Log and Report ... |
config archive ... config log ... config mailsetting relayserver config mailsetting storage config report config system ... config user alias config user map diagnose ... execute ... get system status |