Message tracking ro…
Clear all

Message tracking role access via CloudPanel

12 Posts
2 Users
0 Reactions
Topic starter


we have dedicated Helpdesk group that would be able to do “Message Tracking” in CloudPanel/features/exchange/messagetrackinglogs.

Have assigned one user role “Message Tracking” on Exchange Server side and he is also in “Super Administrators” group in CloudPanel setup page config.

Unfortunately this did not helped with message tracking via CP view, it is still unavailable.

2 Answers

They are a cloudpanel super user and still cannot access the message tracking page? They cant find the link or they get an access denied when they go to it?

The group for super users on the setup page gives you the highest privileges, so something doesnt make sense. Can you tell me what is in your billing admins field on the cloudpanel setup page also?

AD IT Dept Topic starter 2023-06-07 07:52
This post was modified 1 year ago by AD IT Dept

@jdixon mentioned user we`re testing with is not listed in BillingAdmins. After adding – nothing changed, still Error 401.

KMI Support 2023-06-07 08:19

SuperAdmin role is the only requirement, so it must not be properly identifying the user as being a member of what group you have set in the CloudPanel settings for the super admins.

If you can, enable debug mode in CloudPanel and have the user login and try to go to the message tracking page again:

Email the logs to or attach them here.

Topic starter

removed attachment

KMI Support 2023-06-07 13:00

@ad-it-dept The logs do not appear to be in debug mode. Will you follow the link I gave you to put it in debug mode, recycle the IIS application, then reproduce the issue. Email the logs to and provide the username of the user that can’t see the message tracking.

AD IT Dept Topic starter 2023-06-08 02:18

did all according to manual, even restarted IIS.


KMI Support 2023-06-08 09:50

@ad-it-dept What is the user logging in and can’t access the message tracking? You can email it to me. I see some users being checked if they are a “Domain Admin”, which I assume is your super user group?

AD IT Dept Topic starter 2023-06-08 11:17

it is not the “Domain Admins” but “Admins@ecp” group. Username is spa

KMI Support 2023-06-08 11:21

@ad-it-dept In the logs it can’t find the group Admins@ECP because it is querying by the SamAccountName of the group. I’ll look at implementing a change for that, but can you put the groups SamAccountName in the super admin field? It most likely is Admins_ECP instead of Admins@ECP

AD IT Dept Topic starter 2023-06-09 02:38

Yes, we have managed to grant access now. But additionally to that some extra functions appeared, that are not needed for helpdesk staff, can we limit this somehow?

KMI Support 2023-06-11 21:19

@ad-it-dept At this moment, the message tracking log section requires a super admin which has full rights to CloudPanel. The next release already has a custom permission section for granting message tracking log access without super admin, but that hasn’t been released yet.

AD IT Dept Topic starter 2023-06-12 01:41

Good news, thank you for info.