I want to know the minimum permissions required to be granted to a service account to be able to create/manage/delete exchange mailbox.

I tried with Recipient Management role but I am getting the following error while creating mailbox

"Error While executing command - Enable-mailbox : No provisioning handler is installed."

• Moved by Jason Johnston [MSFT]Microsoft employee Wednesday, May 13, 2015 1:19 PM Not a development question.

Hi,

Generally, if the account want to use cmdlet to manage mailbox in Exchange, the following permission is required for this user account:

Organization Management

Recipient Management

Alternatively, we can also use Role Based Access Control (RBAC) to custom the permission role for your account.

Regards,

I do not agree. Recipient Management is a built in security group and is actually within Organization Management. So there would be no need to add Recipient Management if said user is in Org Management.

• Edited by Josh Lavely 21 hours 56 minutes ago Spelling

Hi ,

Create One User Account in Active Directory and delegates the permission

Regards,

Exchange Support

I agree with Josh.

Organization Management is a FULL admins of Exchange.  If you're only looking to create/management/delete mailboxes, this is NOT the role you want to assign.

The Recipient Mgmt group is already assigned the correct cmdlets to be able to create a mailbox for an existing user.  If you want that admin to create an entire user in AD too, you'll need to ensure the proper AD permissions are assigned on the OU in which the user account will live.

Remember, Exchange is AD integrated, so you have to ensure rights are established on both ends.

On another note, with the error given in the OP's question, this isn't a permissions issue, it's a tool failure.

1) Where are  you doing this? ECP? Exchange Shell? 2010 Console?

2) Are you on the Exch box or some kind of admin server?