Veritas Alta™ Archiving : Cloudlink Administration Guide
- About this guide
- About CloudLink
- About Exchange mailbox delegation synchronization
- System requirements for CloudLink
- Steps to set up CloudLink
- Installing or upgrading the CloudLink application
- Setting up CloudLink with Microsoft Exchange
- Configuring Exchange 2003 servers for CloudLink
- Configuring Exchange Server 2007, 2010, 2013, and 2016 servers for CloudLink
- Configuring CloudLink for Microsoft Exchange
- Creating CloudLink tasks for Exchange
- Selecting the Active Directory users, groups, or OUs to perform a task
- Setting up CloudLink with Domino
- Configuring CloudLink for Domino
- Creating CloudLink tasks for Domino
- Monitoring and managing tasks and archive accounts
- Known issues and limitations
Setting the rights for the CloudLink service account to create and remove web folders
The CloudLink service account must have rights on the Exchange server to create and remove web folders for users. To set the rights you must run the required command or commands from the Exchange Management Shell.
To set the rights for the CloudLink service account to create and remove web folders
- On the Exchange server, run the Exchange Management Shell.
Execute the required command or commands from the shell window.
For Exchange Server 2007 you must configure the required user access rights for all the Client Access server and for every back-end mailbox.
For Exchange Server 2010, 2013, and 2016 you must configure a global role to provide the required application impersonation rights.
Table: Commands to set the rights for the CloudLink service account on the Exchange Server lists the required commands for the different versions of Exchange server.
Table: Commands to set the rights for the CloudLink service account on the Exchange Server
Exchange server version | Commands to set the rights for the CloudLink service account |
---|---|
Exchange 2007 | Get-ExchangeServer | where {$_.IsClientAccessServer -eq $TRUE} | ForEach-Object {Add-ADPermission -Identity $_.distinguishedname -User (Get-User -Identity serviceAccountUser | select-object).identity -extendedRight ms-Exch-EPI-Impersonation} Get-MailboxDatabase | ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User serviceAccountUser -ExtendedRights ms-Exch-EPI-May-Impersonate} |
Exchange 2010, 2013, and 2016 | New-ManagementRoleAssignment -Name impersonationAssignmentName -Role applicationImpersonation -User domain\serviceAccountUser |
Where:
impersonationAssignmentName is a suitable unique name for the impersonation assignment.
domain is the Windows domain where the CloudLink service account resides.
serviceAccountUser is the user name of the CloudLink service account.