ACL's and Administration

[rdannand]

In a previous post I mentioned a client that has a problem accepting our team's efforts without elaborate descriptions as to what we do. This is because the previous IT firm royally goofed in setting up their Notes. This client only uses the email and calendar portions, they had no idea about the power of the database functions, and are reluctant to get into it at this time.

I've stated to the client that we discovered that most email database (and other kinds of databases) on his system do not have the administration team listed as a person group with manager access. I personally don't know how they held together so long, but I've advised him to allow the administration team to be added to all databases as a managment group in case of trouble. I find it incredulous, but he wants proof of what we say being really necessary.

Can anyone point me to weblinks or book and page if necessary where it points out the value of administrating teams being managers on the ACLs? I'd really like to silence him on this one.

thanks!

 

[AmazingDominik]

Hi,

Actually this is not really necessary, altough highly recommended.
The most important thing is that the mailboxes have an administration server assigned with manager rights.

Then most things can be managed without the need to have the Administrators in the ACL.

Having the administrators inside the ACL can speed up things in case of trouble but there is usually a way around.

I normally do not put the administrators in the users their mailbox unless they themselves approve of this.

Another reason to move to R6, where an administrator can access EVERYTHING (even private documents) without the need to be listed in the ACL's!



Kind regards,

Dominik Malfait
dominik@amazingit.com

http://www.amazingit.com