Managing Proxy Rights
There are various reasons why end users may need to access the archives of other users. For example, managers may need to access retired accounts belonging to employees who have left the organization.
An end user may contact you to request delegate rights to the archives, also known as proxy access. There are two ways to grant proxy access. The first way is through Outlook, where you can grant the user access to the entire mailbox, if the mailbox is still active. This is called granting impersonation rights. Once the user has access to the entire mailbox, they have access to the archives associated to that mailbox.
You can also grant proxy access to a group.
If the end user does not require impersonation rights (for example, if there is no live account to impersonate) then you may assign proxy access directly to the archives.
As part of a solid Information Governance program, you should periodically verify assigned proxy rights to ensure the appropriate resources have access to the correct archives.
- Select Archiving.
- Select the Proxy Rights tab.
- Use the Search and Find features to select the user who should have proxy access, as well as the archives that the users should have proxy access to.
-
NOTE
When you click Find, both live and archived user accounts (those that are no longer in the live system) will be listed. Accounts with only one ampersand (@) symbol are archived accounts which are not present in the live system. Accounts with two or more ampersand symbols are live accounts. Obviously, you can only give a live user proxy access to an archive. - In some cases, you may want to limit the amount of time a user can proxy into another user's archives. To do so, use the Auto-revoke access in x days option. If this option is not selected, the selected user will have proxy access indefinitely.
- To view what end users see when accessing another account through proxy rights, refer to the IPRO Search Guides.
- Click Get List to obtain a list of user accounts that already have proxy access rights assigned to them.
- Add or remove users.