# Configuration ### Zimlet configuration Main configuration is done through the config file available under `/opt/zimbra/lib/ext/IntalioZiMailApproval/approvalMap.json` **ResponsibleGroups** - Groups of accounts accepting or declining e-mails. **IrresponsibleGroups** - Groups of accounts whose e-mails have to be accepted or declined. **Map** - Defines who can accept whose e-mails. In the following example `jan@zimbrademo.intalio.pl` can review `robert@zimbrademo.intalio.pl` mails when he doen't have an influence on `test@zimbrademo.intalio.pl` account's mails. [![image-1630498391841.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/uYshQaYruSaIDpEd-image-1630498391841.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/uYshQaYruSaIDpEd-image-1630498391841.png)

Mail reviewers have to have also zimlet availibilty set on in the Zimbra Administration Console. [![image-1630574417247.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/wXAr5TcUyyP3cOhz-image-1630574417247.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/wXAr5TcUyyP3cOhz-image-1630574417247.png)

### CBPolicyd configuration ZI-MailApproval requires installed, enabled and configured CBPolicyd service. ##### Pre-requisites Enable the Access Control attribute in Zimbra and restart services. ``` su - zimbra zmprov ms `zmhostname` zimbraCBPolicydAccessControlEnabled TRUE zmmtactl restart zmcbpolicydctl start ``` ##### Group 1. In PolicyD Web interface, Go to **Policies -> Groups**. 2. Click on **Action** dropdown -> Add**.** 3. Specify Name for example *GrupaZiIntalioMailApproval*. Click **Submit**. *GrupaZiIntalioMailApproval* group should be created successfully. [![image-1630507564653.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/JSBHjKsDxheC0zqQ-image-1630507564653.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/JSBHjKsDxheC0zqQ-image-1630507564653.png) 4. Go to **Policies -> Groups** and select *GrupaZiIntalioMailApproval* and from Action dropdown select **Members**. [![image-1630507707298.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/EzTWeqmuFSrLBD2t-image-1630507707298.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/EzTWeqmuFSrLBD2t-image-1630507707298.png) 5. On the page, from Action dropdown select **Add** 6. In *Member* textbox, specify one of the users you want to assign to ZI-MailApproval functionality. Here *test@zimbrademo.intalio.pl* was used as an example. Then click **Submit**. [![image-1630507757030.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/HWl8IMaM7FVekSha-image-1630507757030.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/HWl8IMaM7FVekSha-image-1630507757030.png) 7. At the top of the page, click on **Back to members**. Select the above created member *test@zimbrademo.intalio.pl*. From Action dropdown select **Change**. 8. For **Disabled**, select **No** from the dropdown. Click **Submit**. [![image-1630508390898.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/LLvH7CDbMyE3Bgyh-image-1630508390898.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/LLvH7CDbMyE3Bgyh-image-1630508390898.png) 9. Go to **Policies -> Groups** and select *GrupaZiIntalioMailApproval*. From Action dropdown select **Change**. 10. For **Disabled**, select **No** from the dropdown. Click **Submit [![image-1630507626179.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/WNQQMOaYKHanZP6u-image-1630507626179.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/WNQQMOaYKHanZP6u-image-1630507626179.png)** 11. The *GrupaZiIntalioMailApproval* group is now enabled. ##### Policy 1. Go to **Policies -> Main**. 2. Click on **Action** dropdown -> Add**.** 3. Specify Name for example *ZiIntalioMailApproval*, Priority *10* and Description *ZiIntalioMailApproval*. Click **Submit**. The policy should be created successfully. [![image-1630569738488.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/ujTuyrbM3PKqWBYm-image-1630569738488.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/ujTuyrbM3PKqWBYm-image-1630569738488.png) 4. Go to **Policies -> Main** and select *ZiIntalioMailApproval*. From Action dropdown select **Members**. 5. On the page, from Action dropdown select **Add**. 6. In **Source** textbox, specify *%GrupaZiIntalioMailApproval* and in **Destination** textbox, specify *any*. Click **Submit**. [![image-1630569936938.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/hqFFR0TazU68SinS-image-1630569936938.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/hqFFR0TazU68SinS-image-1630569936938.png) 7. At the top of the page, click on **Back to members**. Select the above created member. From Action dropdown select **Change**. 8. For **Disabled**, select **No** from the dropdown. Click **Submit**. 9. Go to **Policies -> Main** and select *ZiIntalioMailApproval*. From Action dropdown select **Change**. 10. For **Disabled**, select **No** from the dropdown. Click **Submit**. 11. The *ZiIntalioMailApproval* policy is now enabled. ##### Access Control 1. Go to **Access Control -> Configure**. 2. Click on **Action** dropdown -> Add**.** 3. In **Name** textbox, specify *ControlZiIntalioMailApproval*. 4. In **Link to policy** dropdown, select policy *ZiIntalioMailApproval* 5. In **Verdict** dropdown, select *Hold*. [![image-1630571582410.png](https://docs.intalioservices.com/uploads/images/gallery/2021-09/scaled-1680-/0ACYy3OrjcMThswQ-image-1630571582410.png)](https://docs.intalioservices.com/uploads/images/gallery/2021-09/0ACYy3OrjcMThswQ-image-1630571582410.png) 6. Click **Submit**. The Access Control list should be created successfully. 7. Go to **Access Control -> Configure** and select *ZiIntalioMailApproval* 8. From Action dropdown select **Change**. 9. For **Disabled**, select **No** from the dropdown. Click **Submit**