I support a group of executives that has the option to keep mail archives on a server separate from their mail server, and is in a separate domain. Their assistants are the ones who normally perform the archiving, not the execs themselves.
We have seen, on occasion, that the assistants will get the message “You are not authorized to perform that operation.” We have “fixed” this problem by raising the permission of the assistant from Editor (with Delete and Create folders) to Manager on the archive. This is not something we want to continue, as we normally limit user access to Editor, and use group membership instead of explicit name entries.
Does anyone have documented rules for setting up archiving, specifically the minimum access requirements?