Hi all, After I created milbox "test@aam1.com" and grant permission as follow Code: New-ManagementRoleAssignment -Name:"Avaya Impersonation Role" -Role:ApplicationImpersonation -User:test but then I deleted mailbox (in exchange) and user "test" (in Active directory) and grant permission for another user "ex10": Code: New-ManagementRoleAssignment -Name:"Avaya Impersonation Role" -Role:ApplicationImpersonation -User:ex10 but the screen display as: Now, I want to grant permission for "ex10", what steps I will do ? Besides, when I delete user "test", then Active dir announce: "windows cannot delete object because directory object not found" Thanks, cuocdoi

HI you should use Set-ManagementRoleAssignment because you don't want to create again RoleAssgnment you just want to assign it to other user. Remigiusz ExchangeBlog

Hi, This should work: New-ManagementRole -name "Avaya Impersonation Role" -Parent ApplicationImpersonationNew-ManagementRoleAssignment -Role "Avaya Impersonation Role" -User EX10 I think you got the "windows cannot delete object..." becuse the object was already deleted (Remove Mailbox) and you never refreshed the GUI in ADUC.Martina Miskovic

Hi, This should work: New-ManagementRole -name "Avaya Impersonation Role" -Parent ApplicationImpersonationNew-ManagementRoleAssignment -Role "Avaya Impersonation Role" -User EX10 I think you got the "windows cannot delete object..." becuse the object was already deleted (Remove Mailbox) and you never refreshed the GUI in ADUC.Martina Miskovic

Hi, This should work: New-ManagementRole -name "Avaya Impersonation Role" -Parent ApplicationImpersonationNew-ManagementRoleAssignment -Role "Avaya Impersonation Role" -User EX10 I think you got the "windows cannot delete object..." becuse the object was already deleted (Remove Mailbox) and you never refreshed the GUI in ADUC.Martina Miskovic

Hi,Cuocdoi, The above error message indicates that you have created the ManagementRoleAssignment in the first time when you assign it to the user "Test",you can run remove-ManagementRoleAssignment to remove the exsiting one and re-new it with the code you list above again: New-ManagementRoleAssignment -Name:"Avaya Impersonation Role" -Role:ApplicationImpersonation -User:ex10 The error when you delete user "Test" in AD it because the AD object will be deleted along with the mailbox deleted,so it's normal when you try to delete it again. Regards, Sharon Sharon Shen TechNet Community Support ************************************************************************************************************************ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question.

Hi, If I want to list out all permission for user "ex10", what command line will I run ? and in other case, I want to check whether only user "ex10" granted permission (as above), how I check ? Thanks,

Hi, If I want to list out all permission for user "ex10", what command line will I run ? and in other case, I want to check whether only user "ex10" granted permission (as above), how I check ? Thanks,

1) Get-ManagementRoleAssignment -GetEffectiveUsers | ?{$_.EffectiveUserName -eq "EX10"} | select Role 2) Get-ManagementRoleAssignment -role "Avaya Impersonation Role" Martina Miskovic

1) Get-ManagementRoleAssignment -GetEffectiveUsers | ?{$_.EffectiveUserName -eq "EX10"} | select Role 2) Get-ManagementRoleAssignment -role "Avaya Impersonation Role" Martina Miskovic