Enterprise Vault™ Administrator's Guide
- About this guide
- Managing administrator security
- Roles-based administration
- Working with predefined RBA roles
- Customizing RBA roles
- Day-to-day administration
- About Exchange mailbox archiving reports
- About starting or stopping tasks or services
- Monitoring journal mailboxes
- About monitoring disks
- About maintaining the SQL databases
- Using SQL AlwaysOn availability groups
- About managing vault store groups and sharing
- About managing safety copies
- About managing partition rollover
- About expiry and deletion
- Working with retention categories and retention plans
- Setting up retention folders
- Enabling archiving for new mailboxes
- About moving archives
- How Move Archive works
- About moving mailbox archives within a site
- About moving mailbox archives between sites
- About configuring Move Archive
- Running Move Archive
- Monitoring Move Archive
- PowerShell cmdlets for managing archives
- Using Enterprise Vault for records management
- Setting the default record type for users
- Common configuration scenarios
- Searching archives for items marked as records
- Automatically filtering events
- Managing indexes
- About the indexing wizards
- Managing indexing exclusions
- About the indexing PowerShell cmdlets
- Advanced Domino mailbox and desktop policy settings
- Editing the advanced settings for Domino mailbox and desktop policy
- Domino mailbox policy advanced settings
- Archiving General: Domino mailbox policy
- Archiving General: Domino mailbox policy
- Domino desktop policy advanced settings
- Advanced Exchange mailbox and desktop policy settings
- Editing the advanced Exchange mailbox and desktop settings
- Exchange mailbox policy advanced settings
- Archiving General (Exchange mailbox policy advanced settings)
- Archiving General (Exchange mailbox policy advanced settings)
- Exchange desktop policy advanced settings
- Office Mail App (Exchange desktop policy advanced settings)
- Outlook (Exchange desktop policy advanced settings)
- OWA versions before 2013 (Exchange desktop policy advanced settings)
- Vault Cache (Exchange desktop policy advanced settings)
- Virtual Vault (Exchange desktop policy advanced settings)
- Advanced Exchange journal policy settings
- Archiving General (Exchange journal policy advanced settings)
- Advanced Exchange public folder policy settings
- Archiving General (Exchange public folder policy advanced settings)
- Advanced SMTP policy settings
- Site properties advanced settings
- Editing site properties advanced settings
- Site properties advanced settings
- Content Conversion (site properties advanced settings)
- File System Archiving (site properties advanced settings)
- IMAP (site properties advanced settings)
- Indexing (site properties advanced settings)
- Skype for Business (site properties advanced settings)
- SQL Server (site properties advanced settings)
- SMTP (site properties advanced settings)
- Storage (site properties advanced settings)
- Content Conversion (site properties advanced settings)
- Computer properties advanced settings
- Editing computer properties advanced settings
- Computer properties advanced settings
- Agents (computer properties advanced settings)
- IMAP (computer properties advanced settings)
- Indexing (computer properties advanced settings)
- Storage (computer properties advanced settings)
- Task properties advanced settings
- Advanced Personal Store Management properties
- Classification policy advanced settings
- Managing the Storage queue
- Automatic monitoring
- About monitoring using Enterprise Vault Operations Manager
- About monitoring using MOM
- About monitoring using SCOM
- Managing extension content providers
- Exporting archives
- Enterprise Vault message queues
- Customizations and best practice
- Mailbox archiving strategies
- Notes on archiving based on quota or age and quota
- Notes on archiving items from Exchange Server 2010 managed folders
- About performance tuning
- Mailbox archiving strategies
- Failover in a building blocks configuration
- Appendix A. Ports used by Enterprise Vault
- Appendix B. Useful SQL queries
- Appendix C. Troubleshooting
- Installation problems
- Microsoft SQL Server problems
- Server problems
- Client problems
- Problems enabling or processing mailboxes
- Problems with Vault Cache synchronization
- Identifying and resolving Vault Cache issues on the Enterprise Vault server
- Identifying and resolving Vault Cache issues on an end-user computer
- Problems with Enterprise Vault components
- Troubleshooting: All tasks and services
- Troubleshooting: Directory service
- Troubleshooting: Exchange archiving or Journaling tasks
- Troubleshooting: Storage service
- Troubleshooting: Shopping service
- Troubleshooting: Web Access application
- Troubleshooting: All tasks and services
- Techniques to aid troubleshooting
- How to modify registry settings
- About moving an Indexing service
- Appendix D. Enterprise Vault accounts and permissions
About the predefined roles
You can use the predefined roles as supplied, customize them, or create new roles, as required.
By assigning roles you can adjust the permissions of individual administrators to match their job responsibilities. The mechanism is flexible enough for you to be able to modify an individual's role to cope with any change in responsibility.
Table: Predefined administrator roles
Role | Description |
---|---|
Responsible for configuring the Archive Discovery Search Service. This service provides the means through which third-party client applications can create and submit searches of all the archives in an Enterprise Vault installation. Note: By default, users who are assigned to this role do not have permission to use the service's API methods to submit searches, check the status of searches, and retrieve their results. These API methods are available only to users who have permission to perform the task "EVT Execute Searching Archives", such as those with the Task Applications role. | |
Responsible for the day-to-day administration of Domino archiving, including NSF migration. In Enterprise Vault Operations Manager, can view Domino information and parameters. By default, users who are assigned to this role also acquire the permissions that are associated with the following roles:
| |
Responsible for the day-to-day administration of Exchange Server archiving. In Enterprise Vault Operations Manager, can view Exchange Server information and parameters. By default, users who are assigned to this role also acquire the permissions that are associated with the following roles:
| |
Has a view of the Administration Console interface that concentrates on those components that are required for the day-to-day administration of extension content providers. | |
Responsible for the day-to-day administration of File System Archiving. By default, users who are assigned to this role also acquire the permissions that are associated with the following role:
| |
Responsible for the day-to-day administration of IMAP. By default, users who are assigned to this role also acquire the permissions that are associated with the following role:
| |
Has a view of the Administration Console interface that concentrates mainly on those components that are required to keep indexing running properly. This administrator does not have access to archiving policy settings for the various targets. | |
Responsible for the day-to-day administration of Exchange Server and Domino archiving. This administrator does not have access to other parts of the product, such as File System Archiving or SharePoint archiving. By default, users who are assigned to this role also acquire the permissions that are associated with the following roles:
| |
Has a view of the Administration Console interface that concentrates on those components that are required to manage NSF files. In Enterprise Vault Operations Manager, can view Domino information and parameters. | |
Can perform all the tasks in the other predefined administrator roles. Cannot perform reconfiguration tasks such as changing the Vault Service account or Directory SQL server. | |
Has a view of the Administration Console interface that concentrates on those components that are required to manage personal stores. In Enterprise Vault Operations Manager, can view and manage Exchange Server information and parameters. | |
Responsible for the day-to-day administration of the Enterprise Vault Search application: defining search policies, setting up search provisioning groups, and creating and configuring Client Access Provisioning tasks. | |
Has a view of the Administration Console interface that concentrates on those components that are required to manage SharePoint archiving. By default, users who are assigned to this role also acquire the permissions that are associated with the following role:
| |
Responsible for the day-to-day administration of SMTP archiving. By default, users who are assigned to this role also acquire the permissions that are associated with the following role:
| |
Has a view of the Administration Console interface that concentrates mainly on those components that are required to keep storage running properly. This administrator does not have access to archiving policy settings for the various targets. By default, users who are assigned to this role also acquire the permissions that are associated with the following role:
|
Table: Predefined task role
Role | Description |
---|---|
This role provides access to archives to allow an account other than the Vault Service account to run Exchange Server tasks. Enterprise Vault grants this role automatically when you configure an Exchange Server task to run under an account other than the Vault Service account. If you use the Archive Discovery Search Service, it is advisable to grant this role to the account that you use to submit and work with searches. |
Table: Predefined application roles
Role | Description |
---|---|
Compliance Delete Application | This role allows third-party applications to delete items permanently from the Enterprise Vault archives; for example, to comply with data protection legislation such as the "right to be forgotten". |
This role allows a third-party application to act as an extension content provider. The role allows the application to create, delete, read, and update extension content provider entries and to store items into any archive. In Enterprise Vault Operations Manager, can view all information and parameters. This role does not enable full update access to all extension content provider properties. For example, an extension content provider application cannot enable or disable itself and cannot modify or override its own schedule. This role does not allow access to the Administration Console. The role is intended to be for an extension content provider application, not for an administrator. | |
Able to query the state of Enterprise Vault tasks. | |
Able to run the FSAUndelete utility. This role enables the undeletion of items from archives. |