Hi guys,

I've got a little Problem, which is making me crazy: In the ECP I can apply Admin-Roles to Users. In those Admin-Roles I can set the write-access on a specific OU. That works great, all Users which aren't in this OU have read-only textboxes and I can't apply changes to them.

What I am searching for, is the option to hide those read-only Users from the Admin-Page, so that he can see only those users, which are in the applied OU.

This would be really nice, because we realised our hosting solutions this way in the past, each customer has his own OU. If this solution is possible, we could give each customer an additional admin-user, with which he can do little configuration issues on his own. But it wouldn't be so nice, if the customers see each other.

Hi ,

Sorry , Im not very clear, do you share the mailbox to others or grant RBAC role to others to manage the mailboxes in specified ou ?

Hi,

Sorry for my incomplete question. We want to do it with RBAC, like you mentioned.

Currently, in our Exchange 2010-Infrastructure, we have to do every change, that a customer wants, on our own.

The EPC has the capability to let the customer do little administrative things by himself. But we only could realise this, if they couldn't see each other.

Thanks for your

Hi,

What do you mean hide those read-only Users from the Admin-Page  ?

May be you can define OU scope for RBAC role to manage.

Securing MS Exchange 2010: Role Based Access Control (RBAC) Simplified:

http://blogs.technet.com/b/mspfe/archive/2010/11/23/securing_2d00_ms_2d00_exchange_2d00_2010_2d00_role_2d00_based_2d00_access_2d00_control_2d00_rbac_2d00_simplified.aspx

Hi,

Our target is an office365-like administration. Every customer should only see his own users in his OU to administrate them. The other OUs with their included users should be invisible (Very important for us as a hoster).

Our state is now, that the customer can see other customers read-only. That's not

Hi, Carsten

Have you realised your target that every customer should only see his own users in his OU at last?

Hi,
Exchange only provides RBAC write scope and not RBAC read scops, so in order to accomplish your goal you will need to get a Third-Party Application.

Hi Martina,

so this will help. we need to find another solution to build this.

Yes, anyone that wants to provide read scopes needs a Third-Party Application since there are nothing built-in that we can use to create it.

OK, I see, thank you.