diff --git a/src/index.html b/src/index.html
index fbf666370..723272bb5 100644
--- a/src/index.html
+++ b/src/index.html
@@ -176,11 +176,11 @@
                       <a href="" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false"><img ng-src="{{user.avatarUrl}}" style="width: 24px; height: 24px;"/> {{user.username}} <span class="caret"></span></a>
                       <ul class="dropdown-menu" role="menu">
                         <li><a href="#/profile"><i class="fa fa-user fa-fw"></i> {{ 'profile.title' | tr }}</a></li>
-                        <li ng-show="user.isAtLeastAdmin" class="divider"></li>
+                        <li ng-show="user.isAtLeastMailManager" class="divider"></li>
                         <li ng-show="user.isAtLeastAdmin"><a href="#/backups"><i class="fa fa-archive fa-fw"></i> {{ 'backups.title' | tr }}</a></li>
                         <li ng-show="user.role === 'owner'"><a href="#/branding"><i class="fa fa-passport fa-fw"></i> {{ 'branding.title' | tr }}</a></li>
                         <li ng-show="user.isAtLeastAdmin"><a href="#/domains"><i class="fa fa-globe fa-fw"></i> {{ 'domains.title' | tr }}</a></li>
-                        <li ng-show="user.isAtLeastAdmin"><a href="#/email"><i class="fa fa-envelope fa-fw"></i> {{ 'emails.title' | tr }}</a></li>
+                        <li ng-show="user.isAtLeastMailManager"><a href="#/email"><i class="fa fa-envelope fa-fw"></i> {{ 'emails.title' | tr }}</a></li>
                         <li ng-show="user.isAtLeastAdmin"><a href="#/eventlog"><i class="fa fa-list-alt fa-fw"></i> {{ 'eventlog.title' | tr }}</a></li>
                         <li ng-show="user.isAtLeastAdmin"><a href="#/network"><i class="fas fa-network-wired fa-fw"></i> {{ 'network.title' | tr }}</a></li>
                         <li ng-show="user.isAtLeastAdmin"><a href="#/services"><i class="fa fa-cogs fa-fw"></i> {{ 'services.title' | tr }}</a></li>
diff --git a/src/js/client.js b/src/js/client.js
index e62ddf114..9fda0c089 100644
--- a/src/js/client.js
+++ b/src/js/client.js
@@ -62,6 +62,7 @@ var ERROR = {
 var ROLES = {
     OWNER: 'owner',
     ADMIN: 'admin',
+    MAIL_MANAGER: 'mailmanager',
     USER_MANAGER: 'usermanager',
     USER: 'user'
 };
@@ -510,7 +511,8 @@ angular.module('Application').service('Client', ['$http', '$interval', '$timeout
         this._userInfo.avatarUrl = userInfo.avatarUrl + '?s=128&default=mp&ts=' + Date.now(); // we add the timestamp to avoid caching
         this._userInfo.isAtLeastOwner = [ ROLES.OWNER ].indexOf(userInfo.role) !== -1;
         this._userInfo.isAtLeastAdmin = [ ROLES.OWNER, ROLES.ADMIN ].indexOf(userInfo.role) !== -1;
-        this._userInfo.isAtLeastUserManager = [ ROLES.OWNER, ROLES.ADMIN, ROLES.USER_MANAGER ].indexOf(userInfo.role) !== -1;
+        this._userInfo.isAtLeastMailManager = [ ROLES.OWNER, ROLES.ADMIN, ROLES.MAIL_MANAGER ].indexOf(userInfo.role) !== -1;
+        this._userInfo.isAtLeastUserManager = [ ROLES.OWNER, ROLES.ADMIN, ROLES.MAIL_MANAGER, ROLES.USER_MANAGER ].indexOf(userInfo.role) !== -1;
     };
 
     Client.prototype.setConfig = function (config) {
diff --git a/src/views/email.js b/src/views/email.js
index c6791db57..490369814 100644
--- a/src/views/email.js
+++ b/src/views/email.js
@@ -5,7 +5,9 @@
 /* global async */
 
 angular.module('Application').controller('EmailController', ['$scope', '$location', '$translate', '$timeout', '$route', '$routeParams', 'Client', function ($scope, $location, $translate, $timeout, $route, $routeParams, Client) {
-    Client.onReady(function () { if (!Client.getUserInfo().isAtLeastAdmin) $location.path('/'); });
+    Client.onReady(function () { if (!Client.getUserInfo().isAtLeastMailManager) $location.path('/'); });
+
+    $scope.user = Client.getUserInfo();
 
     // Avoid full reload on path change
     // https://stackoverflow.com/a/22614334
diff --git a/src/views/emails.js b/src/views/emails.js
index 6467ec631..6009b13d0 100644
--- a/src/views/emails.js
+++ b/src/views/emails.js
@@ -3,7 +3,7 @@
 /* global $, angular, TASK_TYPES */
 
 angular.module('Application').controller('EmailsController', ['$scope', '$location', '$translate', '$timeout', 'Client', function ($scope, $location, $translate, $timeout, Client) {
-    Client.onReady(function () { if (!Client.getUserInfo().isAtLeastAdmin) $location.path('/'); });
+    Client.onReady(function () { if (!Client.getUserInfo().isAtLeastMailManager) $location.path('/'); });
 
     $scope.ready = false;
     $scope.config = Client.getConfig();
@@ -409,11 +409,13 @@ angular.module('Application').controller('EmailsController', ['$scope', '$locati
             $scope.domains = domains;
             $scope.ready = true;
 
-            $scope.mailLocation.refresh();
-            $scope.maxEmailSize.refresh();
-            $scope.spamConfig.refresh();
-            $scope.solrConfig.refresh();
-            $scope.acl.refresh();
+            if ($scope.user.isAtLeastOwner) {
+                $scope.mailLocation.refresh();
+                $scope.maxEmailSize.refresh();
+                $scope.spamConfig.refresh();
+                $scope.solrConfig.refresh();
+                $scope.acl.refresh();
+            }
 
             refreshDomainStatuses();
         });
diff --git a/src/views/users.js b/src/views/users.js
index b37292684..867fbde99 100644
--- a/src/views/users.js
+++ b/src/views/users.js
@@ -979,6 +979,7 @@ angular.module('Application').controller('UsersController', ['$scope', '$locatio
         $scope.roles = [
             { id: 'user', name: $translate.instant('users.role.user'), disabled: false },
             { id: 'usermanager', name: $translate.instant('users.role.usermanager'), disabled: false },
+            { id: 'mailmanager', name: $translate.instant('users.role.mailmanager'), disabled: false },
             { id: 'admin', name: $translate.instant('users.role.admin'), disabled: !$scope.user.isAtLeastAdmin },
             { id: 'owner', name: $translate.instant('users.role.owner'), disabled: !$scope.user.isAtLeastOwner }
         ];