Add a Role to an Assignment Policy

 

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

If you want to enable users to manage a feature on their mailboxes, you can add a management role to the management role assignment policy they're assigned to. If more than one user is assigned an assignment policy, all the users gain the ability to manage that feature. For more information about assignment policies in Microsoft Exchange Server 2010, see Understanding Management Role Assignment Policies.

Looking for other management tasks related to end users? Check out Managing End Users.

Use the ECP to add a role to an assignment policy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

  1. In the Exchange Management Console (EMC), navigate to Toolbox in the console tree.

  2. In the work pane, double-click Role Based Access Control (RBAC) User Editor to open the user editor in the Exchange Control Panel (ECP).

  3. Provide credentials in the Domain\user name and Password fields for an account that has the permissions needed to open the user editor in the ECP. Click Sign in.

  4. Click the User Roles tab.

  5. Select the assignment policy you want to add one or more roles to, and then click Details.

  6. Select the check box next to the role or roles you want to add to the assignment policy. You can select multiple roles, including end-user roles you've added. If you select a role that has child roles, the child roles are automatically selected.

  7. Click Save to save the changes to the assignment policy.

Use the Shell to add a role to an assignment policy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

To create a management role assignment between a role and an assignment policy, use the following syntax.

New-ManagementRoleAssignment -Name <role assignment name> -Role <role name> -Policy <assignment policy name>

This example creates the role assignment Seattle Users - Voicemail between the MyVoicemail role and the Seattle Users assignment policy.

New-ManagementRoleAssignment -Name "Seattle Users - Voicemail" -Role MyVoicemail -Policy "Seattle Users"

For detailed syntax and parameter information, see New-ManagementRoleAssignment.

Other Tasks

After you add a role to an assignment policy, you may also want to:

 © 2010 Microsoft Corporation. All rights reserved.