Hi,

I've delegated the contact management for a specific OU to a dedicated user-group and from permissions it works fine (as per the documentation from http://blogs.technet.com/b/rmilne/archive/2013/11/21/creating-rbac-role-to-delegate-editing-contacts.aspx)

One problem i have is, that the users can see all contacts from the server and not only the contacts from the OU they manage - i did that already some months ago on another server (if i remember correctly with RecipientFilter parameter) but unfortunately the website with that documentation doesn't exist anymore and i forgot to write that command down :(

The "-RecipientOrganizationalUnitScope" just manages the permission where the role is Group is applied so the permission is working only in their OU but i don't want them to see all contacts not to confuse them (and to keep their list shorter).

Thanks,

Thomas

• Edited by Thomas-VIE 25 minutes ago