Hello,
On a Domino 6.5 server, I am trying to delegate the users management tasks (registration, modification, deletion, etc.) to a group of users called ‘Account Operators’. I have given that group the appropriate ACL rights to certlog.nsf and names.nsf, yet when registering a new user using an account that is member of the Account Operators group, the process starts properly, and it creates the new entry for the new user in the Domino directory, however, it fails to create the mail file for the registered user and the registration process displays the error message: ‘You do not have the right to perform that operation’.
I looked in the Miscellaneous events in notes.log, and noticed two entries related to that issue. The first entry reads: ‘The ACL in database mail\test.nsf (where test.nsf is the mail file for the user being registered) has been changed by Operator/dominodomain’ (where Operator is the delegate account used to register the user ‘test’). This entry is immediately followed by another entry that reads: ‘Database mail\test.nsf deleted by Operator/dominodomain’.
I made sure that the user Operator can indeed create databases on the server. I even created a mail file manually on the server while logged in as the user Operator (Actually, the server security configuration tab is still as it is by default, which means that any authenticated user can create databases).
I tried the same settings on a bench server, and it worked without any problems. Any idea what could be the cause here?
Best Regards,
Nizar El-Assaad