Hi,
we have dedicated Helpdesk group that would be able to do “Message Tracking” in CloudPanel/features/exchange/messagetrackinglogs.
Have assigned one user role “Message Tracking” on Exchange Server side and he is also in “Super Administrators” group in CloudPanel setup page config.
Unfortunately this did not helped with message tracking via CP view, it is still unavailable.
They are a cloudpanel super user and still cannot access the message tracking page? They cant find the link or they get an access denied when they go to it?
The group for super users on the setup page gives you the highest privileges, so something doesnt make sense. Can you tell me what is in your billing admins field on the cloudpanel setup page also?
AD IT Dept Topic starter
2023-06-07 07:52
@jdixon mentioned user we`re testing with is not listed in BillingAdmins. After adding – nothing changed, still Error 401.
Jacob Dixon 2023-06-07 08:19
SuperAdmin role is the only requirement, so it must not be properly identifying the user as being a member of what group you have set in the CloudPanel settings for the super admins.
If you can, enable debug mode in CloudPanel and have the user login and try to go to the message tracking page again: https://kb.knowmoreit.io/en/enable-debug-mode
Email the logs to support@knowmoreit.io or attach them here.
removed attachment
Jacob Dixon 2023-06-07 13:00
@ad-it-dept The logs do not appear to be in debug mode. Will you follow the link I gave you to put it in debug mode, recycle the IIS application, then reproduce the issue. Email the logs to support@knowmoreit.io and provide the username of the user that can’t see the message tracking.
AD IT Dept Topic starter
2023-06-08 02:18
Jacob Dixon 2023-06-08 09:50
@ad-it-dept What is the user logging in and can’t access the message tracking? You can email it to me. I see some users being checked if they are a “Domain Admin”, which I assume is your super user group?
AD IT Dept Topic starter
2023-06-08 11:17
it is not the “Domain Admins” but “Admins@ecp” group. Username is spa
Jacob Dixon 2023-06-08 11:21
@ad-it-dept In the logs it can’t find the group Admins@ECP because it is querying by the SamAccountName of the group. I’ll look at implementing a change for that, but can you put the groups SamAccountName in the super admin field? It most likely is Admins_ECP instead of Admins@ECP
AD IT Dept Topic starter
2023-06-09 02:38
Yes, we have managed to grant access now. But additionally to that some extra functions appeared, that are not needed for helpdesk staff, can we limit this somehow?
Jacob Dixon 2023-06-11 21:19
@ad-it-dept At this moment, the message tracking log section requires a super admin which has full rights to CloudPanel. The next release already has a custom permission section for granting message tracking log access without super admin, but that hasn’t been released yet.
