How do I give an AD-synced user account the ability to manage the quarantine for a mailing list?

Question

I'd like to give one of our AD-synced user accounts the ability to manage the quarantine for several mailing lists, but I am not sure how to do so--or if it can be done at all. 
 While I can add the mailing list addresses as alternate addresses for this account (as suggested in the online manual), these additions are overwritten upon the next directory sync. It seems this method will only work if using a local user account. 
 Of course, I can give this user account Mail Manager access in WebAdmin Settings>Access Control , but this gives system-wide access, and that's not optimal. 
 Is there another way?

BAlfson · Accepted Answer

Matthew, it is possible to create a cron job that adds an address back in. You should check with Sophos Support for approval before you do it though. Schedule it to run a few minutes after your Prefetch runs. 
 Assuming the user is jsmith, you can get the REF_ of the User object with: 
 cc get_object_by_name jsmith 
 Assuming we find REF_AaaUseJsmith, add the following line to /etc/crontab-static (where you want the command to run at 05:10 every day): 
 10 5 * * * root confd-client.plx change_object REF_AaaUseJsmith email_secondary 'maillist@domain.com' 
 To get that line added to /etc/crontab, go to 'Management >> Up2Date' 'Configuration' and change one of the Intervals, [Apply] and then change it back, [Apply]. 
 Again, you will want to get explicit approval from Support for this. 
 Cheers - Bob

MatthewArciniega1 · Answer

Thanks, Bob. Unfortunately, Sophos has refused my request to go this route. 
 I'm trying a different approach: 
 
 Create a local UTM account, called list.manager@mydomain.com. Populate the alternate email addresses of this account with my distro lists, making this account a "mail manager". 
 Create an Exchange account (disabled to prevent account logon) for list.manager@mydomain.com, in an OU that will not be synchronized with UTM. (Having an account in AD allows recipient verification to work properly.) 
 Create a transport rule in Exchange that redirects quarantine notifications for list.manager@mydomain.com to the real person who should manage these lists. (A simple "forward" would work as well.) 
 
 This is not as flexible as I would like, but it should work for us.