In the eac, go to permissions > user roles and click new. In the new role assignment policy window that opens, configure the following settings: Enter a descriptive name.
Enter an optional description. Select the roles that you want to assign to the policy. When you're finished, click save.
Exchange 2010 includes a default. If so, it will be the default policy automatically after saving your settings. When you do this, any new mailboxes are assigned the role assignment policy you.
For more information about assignment policies, see understanding management role assignment policies. You need to be assigned permissions before you can run this cmdlet. One question i got in response to my article “group owners cannot manage distribution groups once migrated from exchange 2003 to 2010” was the steps required to tweak the default role assignment policy so that the owners can modify the groups, but users cannot create or delete distribution groups.
Let me explain the steps required, which have to be done in the shell. Some parameters and settings may be exclusive to one environment or the other. For information about the parameter sets in the syntax section below.
For example, to set neil’s mailbox to use a management role assignment policy called new policy the following cmdlet could be used: Add a role to an assignment policy use the eac to add a role to an assignment policy. In the eac, navigate to permissions > user roles.
Select the assignment policy you want to add one or more roles to, and then click edit. Select the check box next to the role or roles you want to add to. The new permissions model.
Since rights are assigned based on the role, more thought will have to go into what the access requirements are for a particular job function. There are three ways that permissions can be assigned with rbac: I need a small help.
The permissions model that exchange 2010 uses is called role based access control (rbac). You’ll find the policy in the exchange admin center under “permissions” and “user roles”. Role assignment policies, which are part of the role based access control (rbac).
Creates a new rbac role that is a child of the mydistributiongroups role. Assigns the new role to the default role assignment policy. You cannot change the built in roles, you can only edit copies of them.
