Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to Microsoft Exchange

Managing Microsoft Exchange Environments Setting up Microsoft Exchange Synchronization Base Data for Managing Microsoft Exchange Microsoft Exchange Structure Mailboxes E-Mail Users and E-Mail Contacts Mail-enabled Distribution Groups Dynamic Distribution Group Mail-Enabled Public Folder Extensions for Supporting Exchange hybrid Troubleshooting Appendix: Configuration Parameters for Managing a Microsoft Exchange Environment Appendix: Default Project Template for Microsoft Exchange

Permission "Send on behalf of" for Mailboxes

Use the send permission "Send on behalf of" to specify which users can send messages on behalf of the mailbox owner.

To modify the permission "Send on behalf of" for mailboxes

  1. Select the category Active Directory | Mailboxes.
  2. Select a mailbox in the result list.
  3. Select Assign send authorizations in the task view.
  4. Select the table which contains the user from the menu at the top of the form. You have the following options:
    • Mail-enabled distribution groups
    • Mailboxes
    • E-mail users

  5. Assign users in Add assignments.

    - OR -

    Remove users from Remove assignments.

  6. Save the changes.

E-Mail Users and E-Mail Contacts

Mail-enabled recipients obtain data about users from outside the Microsoft Exchange organization. There is at least one email address defined for a mail recipient. Notification is automatically forwarded to this email address. You can manage mail-enabled Active Directory user accounts (e-mail users) and mail-enabled Active Directory contacts (e-mail contacts) in One Identity Manager.

Detailed information about this topic

Entering Master Data for E-Mail Users

Enter e-mail users for Active Directory user accounts. Active Directory user accounts can either have a mailbox or be mail-enabled. If a user account already has a mailbox, you must delete the mailbox before you set up an e-mail user for this user account.

NOTE: It is recommended to use account definitions to set up e-mail users for company employees.

  • In order to create e-mail users through account definitions, employees must have a central user account and obtain the IT operating data through assignment to a primary department, primary location or a primary cost center.
  • In this case, some of the master data described in the following is mapped through templates from employee master data.

To create an e-mail user for an Active Directory user account manually

  1. Select the category Active Directory | User accounts.
  2. Select the user account in the result list and run Create e-mail user in the task view.
  3. Save the changes.

To edit an e-mail user.

  1. Select the category Active Directory | E-mail users.
  2. Select the e-mail user in the result list and run the task Change master data.
  3. Edit the email user's master data.
  4. Save the changes.
Table 41: General Data of an E-Mail User
Property Description
Employee Employee to use the e-mail user. An employee is already entered if the e-mail user was generated by an account definition. If you create the e-mail user manually, you can select an employee in the menu.
Account definition

Account definition through which the e-mail user was created.

Use the account definition to automatically populate e-mail user master data and to specify a manage level for the e-mail user. The One Identity Manager finds the IT operating data of the assigned employee and uses it to populate the corresponding fields in the e-mail user.

Note: The account definition cannot be changed once the e-mail user has been saved.

Manage level

 Manage level with which the e-mail user is created. Select a manage level from the menu. You can only specify the manage level can if you have also entered an account definition. All manage levels of the selected account definition are available in the menu.
Active Directory account Active Directory user account for which the e-mail user is created.
Exchange organization

Name of the organization.

Canonical name Canonical name of the e-mail user. The canonical name is generated automatically.
Destination address Email address for forwarding messages.
Destination address type

Target address type of the email address. You can also add other mail connectors (e.g. CCMail, MS) apart from the standard destination address type (SMTP, X400).

Alias Unique alias for further identification of the e-mail user.
Automatically update based on recipient policy Specifies whether changes to recipient's email addresses are automatically updated based on incoming settings.
Proxy addresses

Other email addresses for the e-mail user. You can also add other mail connectors (for example, CCMail, MS) in addition to the standard address type (SMTP, X400).

Use the following syntax to set up other proxy addresses:

Address type: new email address

Max. send size [KB] Maximum size for message in KB that an e-mail user can send. The Microsoft Exchange organization global settings in the Microsoft Exchange System Manager come into effect for message delivery if there are no limitations.
Max. receiving size [KB] Maximum size for message in KB that an e-mail user can receive. The Microsoft Exchange organization global settings in the Microsoft Exchange System Manager come into effect for message delivery if there are no limitations.
Do not display in address list Specifies whether the e-mail user is visible in address books. Set this option if you want to prevent the the e-mail user from being displayed in address books. This option applies to all address books.
Use MAPI-RTF Specifies whether the e-mail user can receive messages in MAPI format. Available options are "Never", "Always" and "Use default settings".
Sender authentication required

Specifies whether authentication data is requested from senders. Set this option to prevent anonymous senders mailing the e-mail user.

Simple display Simple display name for systems that cannot interpret all the characters of normal display names.
Distinguished name E-mail user's distinguished name.
Related Topics

Entering Master Data for E-Mail Contacts

Enter e-mail contacts for Active Directory contacts.

NOTE: It is recommended to use account definitions to set up e-mail contacts for company employees.

  • In order to create e-mail contacts through account definitions, employees must have a default email address and obtain their company IT data through assignment to a primary department, primary location or a primary cost center.
  • In this case, some of the master data described in the following is mapped through templates from employee master data.

To create an e-mail contact for an Active Directory contact manually

  1. Select the contact in the result list and run Create e-mail contact in the task view.
  2. Save the changes.

To edit an e-mail contact

  1. Select the category Active Directory | E-mail contacts.
  2. Select the e-mail contact in the result list and run the task Change master data.
  3. Edit the email contact's master data.
  4. Save the changes.
Table 42: General Data of an E-Mail Contact
Property Description
Employee Employee to use the e-mail contact. An employee is already entered if the e-mail contact was generated by an account definition. If you create the e-mail contact manually, you can select an employee in the menu.
Account definition

Account definition through which the e-mail contact was created.

Use the account definition to automatically populate e-mail contact master data and to specify a manage level for the e-mail contact. The One Identity Manager finds the IT operating data of the assigned employee and uses it to populate the corresponding fields in the e-mail contact.

Note: The account definition cannot be changed once the e-mail contact has been saved.

Manage level

 Manage level with which the e-mail contact is created. Select a manage level from the menu. You can only specify the manage level can if you have also entered an account definition. All manage levels of the selected account definition are available in the menu.
Active Directory contact Active Directory contact for whom the e-mail is created.
Exchange organization

Name of the organization.

Canonical name Canonical name of the e-mail contact. The canonical name is generated automatically.
Destination address Email address for forwarding messages.
Destination address type

Target address type of the email address. You can also add other mail connectors (e.g. CCMail, MS) apart from the standard destination address type (SMTP, X400).

Alias Unique alias for further identification of the e-mail contact.
Automatically update based on recipient policy Specifies whether changes to recipient's email addresses are automatically updated based on incoming settings.
Proxy addresses

Other email addresses for the e-mail contact. You can also add other mail connectors (for example, CCMail, MS) in addition to the standard address type (SMTP, X400).

Use the following syntax to set up other proxy addresses:

Address type: new email address

Max. send size [KB] Maximum size for message in KB that an e-mail contact can send. The Microsoft Exchange organization global settings in the Microsoft Exchange System Manager come into effect for message delivery if there are no limitations.
Max. receiving size [KB]

Maximum size for message in KB that an e-mail contact can receive. The Microsoft Exchange organization global settings in the Microsoft Exchange System Manager come into effect for message delivery if there are no limitations.

Do not display in address list Specifies whether the e-mail contact is visible in address books. Set this option if you want to prevent the e-mail contact from being displayed in address books. This option applies to all address books.
Use MAPI-RTF Specifies whether the e-mail contact can receive messages in MAPI format. Available options are "Never", "Always" and "Use default settings".
Sender authentication required Specifies whether authentication data is requested from senders. Set this option to prevent anonymous senders mailing the e-mail contact.
Simple display Simple display name for systems that cannot interpret all the characters of normal display names.
Distinguished name E-mail contact's distinguished name.
Related Topics
Related Documents