How to prevent admin account to see everyone emails

[padaliyajay20]

Hi There

I am facing problem about emails, admin can see every emails store in espocrm. i can set role to regular account but if i set role to admin account then permission is not getting overwrite. admin can still see all emails. how to make sure each accounts can see their own emails only from their personal email account IMAP

[heint]

Greetings, padaliyajay20,

Admin users in an EspoCRM instance have *carte blanche*, which means you cannot limit admins' permissions. Check the documentation page regarding Personal Email Account if you want users to use their personal account or set corresponding role access: https://docs.espocrm.com/administrat...email-accounts.

[rabii]

hey padaliyajay20,

You can't do that through UI but if you have a coding experience there is a way and it is simple and clean. using espocrm metadata https://docs.espocrm.com/development...adminmandatory

Add the following configuration to your instance - create this file custom/Espo/Custom/Resources/metadata/app/acl.json file: and add content below

{  
    "adminMandatory": {  
        "scopeLevel": {  
            "Email": {  
                "read": "own",  
                "edit": "own",  
                "delete": "own",  
                "create": "yes"  
            }  
        }  
    }  
} 

In this configuration you are limiting the admin to read only their own emails - edit only their own emails and also delete only their own emails and of course they are allowed to create a new email.

You can change the values as you wish e.g allow them to read their team's emails the you should use something "read": "team" etc

Clear cache afterward and rebuild and this will work.

I hope this helps