Setting Up User Rights With GroupWise Forensics

  • 7019990
  • 06-Jul-2009
  • 03-Aug-2018

Environment

GroupWise Forensics 18 (Reveal)

Situation

How do you setup user rights to specific domains, post offices or other users with Reveal?

Resolution

Setting up rights is a great tool for Reveal to restrict access for users to specific domains, post offices, or other mailboxes to view. First you must have GroupWise Forensics installed on your system and have made the initial connection to the GroupWise system. To setup rights follow these steps: 
1)  Locate the userrightssample.ini file. This file is located in the GroupWise Forensics application directory (C:\Program Files(x86)\GroupWise Forensics18 
2)  Rename this file or make a copy of it, but make sure it remains in the application directory. Rename the file to userrights.ini 
3)  Edit the file. The userrights.ini will contain information on how to setup rights within Retain. It gives examples on how to setup the rights. Leave all of the information as is in the file. At the bottom of the file add in the new criteria.

The following will go through the process on how to setup a user and restrict that user to the different areas of GroupWise. 
a) To add in new rights access for users within GroupWise Forensics is a simple process. First you specify the user you are giving access. Make sure to put the user in square brackets.  For example: [USER1] 

                        b) The next step is to specify which level of access you wish to give the user: domain, post office, or individual mailboxes. The restrictions are hierarchical, meaning if restricted on the highest level (Domain) the user will not be able to see anything that filters down below. 
 
i) For Domain add in the domain name then =1 to allow access.  For example: 
[USER1] 
DOMAIN1=0
*DOMAIN2=1
   This allows USER1 to not have access to DOMAIN0 but will have access to DOMAIN2. 
   *Note: It is not necessary to specify DOMAIN2=1, as anything not listed for the user will have
                                    access to it unless set =0. 
   The user will be able to view all mailboxes, and all post offices under DOMAIN2, but not for
                                   DOMAIN1.

      ii) For the post offices it is exactly the same pattern as the domain. 
 [USER1] 
  PO1=0
  PO2=1 
   This allows USER1 to not have access to PO1, but will have access to PO2. 
        *Note: It is not necessary to specify PO2=1, as anything not listed for the user will
                                        have access to it unless set =0. 
        The user will not be able to view all mailboxes under  PO1, but will be able to view all
mailboxes under PO2
                                    
iii)  For the mailboxes it is exactly the same pattern as the domain and post offices. 
 [USER1] 
  USER2=0
  USER3=1 
   This allows USER1 to not have access to USER2, but will have access to USER3. 
        *Note: It is not necessary to specify USER3=1, as anything not listed for the user will
                                        have access to it unless set =0. 
        The user will not be able to view the user and messages for USER2, but will be able to view
                                        the user and message for USER3    

 Note: Future revisions of Reveal will have a new application for assigning rights to users.

Additional Information

This article was originally published in the GWAVA knowledgebase as article ID 1317.

Feedback service temporarily unavailable. For content questions or problems, please contact Support.