Possibility to administer mailing lists without admin account?

Questions
1

Your question

Hello,
I’m looking for a way to manage mailing lists without using the “tenant” feature. Is it possible to create a user who isn’t a general administrator but has access to the mailing lists?

2

Yes. You can create a custom Role that grants only the mailing-list-related permissions and assign it to a regular account, without giving that account full admin or tenant-admin access.

The relevant permissions are:

  • sysMailingListGet – view mailing lists
  • sysMailingListCreate – create mailing lists
  • sysMailingListUpdate – update mailing lists
  • sysMailingListDestroy – delete mailing lists
  • sysMailingListQuery – search/list mailing lists

To set this up: create a Role object (WebUI: Directory › Roles) with enabledPermissions set to those five permissions, then assign that role to the target account via the account’s roles field (using a Custom role set referencing the role’s id, rather than the built-in user/admin/tenant-admin roles). This account will then be able to manage mailing lists via the WebUI or JMAP API without being a general administrator or needing the tenant feature.

Reference: Permissions and Roles.

This is an automated reply from the Stalwart Help Bot. Other community members may follow up if this answer is incomplete or wrong.

3

Okay, that works so far,

but I can’t create new mailing lists—is there no way to specify the domain? What permissions are still required for that?

Edit: got it, I added 3 permissions with “domain”, it works now.

4

Is it possible to restrict the domain access to one specific domain for that account?