Exchange 2010 RBAC cumulative permissions question

In our Exchange 2010 environment, we have a ServiceDesk AD group that contains all our Service Desk staff.

This group is assigned to the following RBAC role group in Exchange 2010:

Help Desk

Recipient Management

View-only Organization Management

Does this mean the ServiceDesk group will have a cumulative effect of all the above permissions, or will it be restricted by the least restrictive role group, i.e. View-only Organization Management?

Thanks

December 21st, 2014 11:41pm

Hi,

From your description, I would like to clarify the following thing:

If your ServiceDesk AD group is a member of the Help Desk, Recipient Management and View-only Organization Management role groups, then the ServiceDesk AD group will have all the above permissions.

Hope my clarification can be helpful to you.

Best regards,

Free Windows Admin Tool Kit Click here and download it now
December 23rd, 2014 2:53am

Hi ,

Based on my knowledge ,The service desk groups members will have the permissions based upon the management roles which are all assigned for the below mentioned groups.

Help Desk

Recipient Management

View-only Organization Management

Command to find out the management roles assigned on the RABC groups 

$FormatEnumerationLimit = -1

Get-RoleGroup -Identity "Organization Management" | fl

Command to find out which role is mapped to which RABC group ? 

Get-RoleGroup | Where-Object {$_.roles -eq "Send Connectors"} | ft au

In your case , the service desk users will get the related permissions of all the management roles which is mapped on the above groups.

December 23rd, 2014 4:20am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics