325992eaa2
Sync iRedAdmin-Pro RESTful API doc.
64 lines
2.2 KiB
Markdown
64 lines
2.2 KiB
Markdown
# Promote a mail user to be global admin
|
|
|
|
[TOC]
|
|
|
|
## Summary
|
|
|
|
If you forgot password of existing global admin account, or mistakenly removed
|
|
global admin, you can promote an existing mail user to be a global admin by
|
|
following this tutorial.
|
|
|
|
## Promote user to be global admin
|
|
|
|
### SQL backends
|
|
|
|
Let's say you want to promote existing mail user `john@example.com` to be
|
|
__global admin__, here's SQL commands to achieve this goal (note: we use MySQL
|
|
for example):
|
|
|
|
```
|
|
sql> USE vmail;
|
|
sql> UPDATE mailbox SET isadmin=1, isglobaladmin=1 WHERE username='john@example.com';
|
|
sql> INSERT INTO domain_admins (username, domain) VALUES ('john@example.com', 'ALL');
|
|
```
|
|
|
|
That's it, you can now login to iRedAdmin as `john@example.com` (with `john@example.com`'s password).
|
|
|
|
To promote user `smith@test.com` to be admin of domain `test.com` (Note: normal domain admin is only available in iRedAdmin-Pro):
|
|
|
|
```
|
|
sql> USE vmail;
|
|
sql> UPDATE mailbox SET isadmin=1, isglobaladmin=0 WHERE username='smith@test.com';
|
|
sql> INSERT INTO domain_admins (username, domain) VALUES ('smith@test.com', 'test.com');
|
|
```
|
|
|
|
### LDAP backends
|
|
|
|
To promote existing mail user `john@example.com` to be __global admin__:
|
|
|
|
* Update LDAP object of mail user `john@example.com` (its full dn is:
|
|
`mail=john@example.com,ou=Users,domainName=example.com,o=domains,dc=xx,dc=xx`),
|
|
add LDAP attribute `enabledService=domainadmin` and `domainGlobalAdmin=yes`.
|
|
|
|
To promote existing mail user `smith@test.com` to be admin of domain `test.com`:
|
|
|
|
1. Update LDAP object of mail user `smith@test.com` (its full dn is:
|
|
`mail=smith@test.com,ou=Users,domainName=test.com,o=domains,dc=xx,dc=xx`),
|
|
add LDAP attribute/value pair: `enabledService=domainadmin`.
|
|
|
|
1. Update LDAP object of mail domain `test.com` (its full dn is:
|
|
`domainName=test.com,o=domains,dc=xx,dc=xx`), add LDAP attribute/value pair:
|
|
`domainAdmin=smith@test.com`.
|
|
|
|
## Mark user as global domain admin with iRedAdmin-Pro
|
|
|
|
With iRedAdmin-Pro, you can mark user as either global domain admin or normal
|
|
domain admin in user profile page, under tab `General`.
|
|
|
|
![](./images/iredadmin/user_profile_general.png)
|
|
|
|
## See also
|
|
|
|
* [Reset user password](./reset.user.password.html)
|
|
* [Password hashes used/supported by iRedMail](./password.hashes.html)
|