I was wondering what are the full set of AD permissions that would be required for an installation of CU 8/9. I need that information for highly secured environment where Role Based model has been used.

I tried to look for an article, but no luck so far:(

Thank you.

you require schema admins for schema update

Organization admin for CU installation

Hi,

You must ensure the account you use is delegated membership in the Schema Admins group if you haven't previously prepared the Active Directory schema. If you're installing the first Exchange 2013 server in the organization, the account you use must have membership in the Enterprise Admins group. If you've already prepared the schema and aren't installing the first Exchange 2013 server in the organization, the account you use must be a member of the Exchange 2013 Organization Management role group.

More information

https://technet.microsoft.com/en-us/library/bb124778%28v=exchg.150%29.aspx

Best Regards.

Thank you for the reply. However in our organization this would be not applicable, as in the organization the "RBAC Split Permissions" model is used. Basically I need the management assignment roles that I need to have in order to perform the installation. I cannot use the Organization Management group.

Do you know what roles do I need?

Hi EXC_FAN,

 If you have already performed the Schema and Active Directory preparation steps(by the AD team), the account you use must be a member of the Delegated Setup management role group or the Organization Management role group.

You can find the Organization Management - Management roles that are assigned to this role group here:
https://technet.microsoft.com/en-us/library/dd335087(v=exchg.150).aspx