Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Feature Requests
  3. Role required to enable mailbox creation

Role required to enable mailbox creation

Scheduled Pinned Locked Moved Feature Requests
emailusermanagement
17 Posts 6 Posters 1.7k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • potemkin_aiP Offline
    potemkin_aiP Offline
    potemkin_ai
    wrote on last edited by girish
    #1

    Hi, I setup a system, created a local admin account with User Manager role in it (https://docs.cloudron.io/user-management/#user-manager), but he has no access to create mailboxes for the user - is there any way to enable that feature, without giving Admin permissions?

    And just in case, as it's not quite clear in official documentation: e-mail mailboxes are backed up and will be restored in case of the disaster recovery, is that a correct assumption?

    1 Reply Last reply
    3
    • nebulonN Away
      nebulonN Away
      nebulon Staff
      wrote on last edited by
      #2

      First for the backup, all mailboxes are part of the backup and thus can be restored. They are part of the platform backup or in Cloudron terms "box" backups.

      For the role, there is currently no specific email role and the user manager role also does not apply here. So far we haven't seen much requests regarding those roles, so there is a lot to be improved I think. Also while reading your question, it may actually make a lot of sense to allow the usermanager role to also manage mail related things. Not sure yet, feedback welcome.

      To answer your immediate question, the only way to do this is to grant admin rights for this user at the moment.

      potemkin_aiP jdaviescoatesJ 3 Replies Last reply
      2
      • potemkin_aiP Offline
        potemkin_aiP Offline
        potemkin_ai
        replied to nebulon on last edited by
        #3

        @nebulon thank you! It makes sense for me as well (usermanager role to manage user related things in overall).

        That let separate things quite nicely and install Cloudron in more complex environments.

        Hope you will make it sooner, rather than later - I'm looking forward to it! 😃

        potemkin_aiP 1 Reply Last reply
        1
        • potemkin_aiP Offline
          potemkin_aiP Offline
          potemkin_ai
          replied to nebulon on last edited by
          #4

          @nebulon any updates?

          1 Reply Last reply
          1
          • potemkin_aiP Offline
            potemkin_aiP Offline
            potemkin_ai
            replied to potemkin_ai on last edited by
            #5

            @girish probably you can assist?

            nebulonN 1 Reply Last reply
            1
            • nebulonN Away
              nebulonN Away
              nebulon Staff
              replied to potemkin_ai on last edited by
              #6

              @potemkin_ai at the moment this is not on our immediate list for the next release. It needs further investigation what the side-effects are.

              potemkin_aiP 2 Replies Last reply
              0
              • potemkin_aiP Offline
                potemkin_aiP Offline
                potemkin_ai
                replied to nebulon on last edited by
                #7

                @nebulon got it, thank you!

                1 Reply Last reply
                1
                • jdaviescoatesJ Online
                  jdaviescoatesJ Online
                  jdaviescoates
                  replied to nebulon on last edited by
                  #8

                  @nebulon said in Role required to enable mailbox creation:

                  it may actually make a lot of sense to allow the usermanager role to also manage mail related things. Not sure yet, feedback welcome.

                  Yes, I think User Managers should be able to create email accounts too, given that in many cases a new user will also need a mailbox.

                  I use Cloudron with Gandi & Hetzner

                  micmcM 1 Reply Last reply
                  3
                  • micmcM Offline
                    micmcM Offline
                    micmc
                    replied to jdaviescoates on last edited by
                    #9

                    @jdaviescoates said in Role required to enable mailbox creation:

                    @nebulon said in Role required to enable mailbox creation:

                    it may actually make a lot of sense to allow the usermanager role to also manage mail related things. Not sure yet, feedback welcome.

                    Yes, I think User Managers should be able to create email accounts too, given that in many cases a new user will also need a mailbox.

                    And I can only agree with that guys.

                    Ignorance is not an excuse anymore!
                    https://AutomateKit.com

                    1 Reply Last reply
                    2
                    • potemkin_aiP Offline
                      potemkin_aiP Offline
                      potemkin_ai
                      replied to nebulon on last edited by
                      #10

                      @nebulon is there any updates on this?

                      girishG 1 Reply Last reply
                      2
                      • girishG Offline
                        girishG Offline
                        girish Staff
                        replied to potemkin_ai on last edited by
                        #11

                        @potemkin_ai Can you tell your use case a bit more? Would this have to be at a domain level? Or server/cloudron level? Can a user add mailboxes for other users or just himself?

                        potemkin_aiP 1 Reply Last reply
                        0
                        • potemkin_aiP Offline
                          potemkin_aiP Offline
                          potemkin_ai
                          replied to girish on last edited by
                          #12

                          @girish sure - the idea is to separate system administrator from mail & users administrator.

                          In my particular case I'm taking care of the OS & system things and don't touch or care about user's account and mailboxes; my partner doesn't want to care about how things works, he cares about users accounts and mailboxes.

                          Hope that makes sense!

                          girishG 1 Reply Last reply
                          0
                          • girishG Offline
                            girishG Offline
                            girish Staff
                            replied to potemkin_ai on last edited by
                            #13

                            @potemkin_ai I see, so you don't want your partner to be an admin either i.e cannot configure/install apps ? And neither can they start/stop mail server or configure the mail server settings. Just add mailboxes/lists/aliases ?

                            (Just trying to think what this means code wise internally. A person who can just add mailboxes still has to be able to list domains, for example).

                            M 1 Reply Last reply
                            0
                            • M Offline
                              M Offline
                              msbt App Dev
                              replied to girish on last edited by
                              #14

                              @girish what I would want is something like a domain-administrator, who can add users/email and apps (or maybe with the option not to install apps) for one or more domains, so they can't interfere with admins from other domains 😉

                              girishG 1 Reply Last reply
                              1
                              • girishG Offline
                                girishG Offline
                                girish Staff
                                replied to msbt on last edited by girish
                                #15

                                @msbt yeah, that would promote shared hosting style setups. Internally, Cloudron is designed for single tenant setups. For example, one has to be careful to not "leak" domains/users/apps/settings to other tenants. People will then want to brand each tenant landing page separately, have settings per tenant and so on. Not sure we want to go into that direction yet.

                                M potemkin_aiP 2 Replies Last reply
                                2
                                • M Offline
                                  M Offline
                                  msbt App Dev
                                  replied to girish on last edited by
                                  #16

                                  @girish hah true, I'll try again next year 😄

                                  1 Reply Last reply
                                  3
                                  • murgeroM murgero referenced this topic on
                                  • potemkin_aiP Offline
                                    potemkin_aiP Offline
                                    potemkin_ai
                                    replied to girish on last edited by
                                    #17

                                    @girish what about just a normal organization level rights separation?
                                    I mean - it's really two different set of roles:

                                    • 1st line support, dealing with mailboxes
                                    • 2nd or 3rd, making sure the system and services are up and running.

                                    I don't need hiding anything, I just want to ensure my users can manage they mailboxes and users for they own.

                                    For now I have to temporary give admin permissions to the 1st line and that's kind of risky...

                                    1 Reply Last reply
                                    3

                                    • Login

                                    • Don't have an account? Register

                                    • Login or register to search.
                                    • First post
                                      Last post
                                    0
                                    • Categories
                                    • Recent
                                    • Tags
                                    • Popular
                                    • Bookmarks
                                    • Search