Hi, I think this issue is related to RBAC that I have setup because 1. I'm able to query the user with get-mailbox and I get everything back right away. 2. Even when I scwitched to ViewEntireForest $true it says that "Recipient ... couldn't be read from domain controller. This maybe due to replication delays. Switching out of Forest mode should allow this operation to complete sucessfully. Weill, didn't work. So, I here's what I have setup for RBAC 1. Management scope with -RecipientRoot "contoso.com/Staff" -RecipientRestrictionFilt {RecipientType -eq "UserMailbox"} 2. New-ManagementRole "Special Role" 3. Add RoleEntry Add-ManagementRoleEntry "Special Role\Set-Mailbox" -Parameters EmailAddressPolicyEnabled, EmailAddresses,PrimarySmtpAddress 4. Create new role group "Special Role Group" and link Mgmt Scope and Mgmt Role to this role group Link scope and role to my role group Get-ManagementRoleAssignment -RoleAssignee "Special Role Group" | Set-ManagementRoleAssignment -CustomRecipientWriteScope "Special Mgmt Scope" What else is there to get this working? I just want this special role to be able to make changes to e-mail addresses Thanks

RoleAssignmentDelegationType : Regular CustomRecipientWriteScope : Special Mgmt Scope CustomConfigWriteScope : RecipientReadScope : Organization ConfigReadScope : OrganizationConfig RecipientWriteScope : CustomRecipientScope ConfigWriteScope : OrganizationConfig Enabled : True RoleAssigneeName : Special Role Group

Hello, Please have a test to create a new role and skip the third step that you provided in your initial response. Thanks, Simon Wu Exchange Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com