NickFerrar
MIS
We have a separate Security Admin team where I work who do all account admin and they also need to be able to modify mailbox permissions for people. Now the standard way to do this seems to be to delegate them Exchange Full Admin at the Admin Group level but to me that's giving them way too much anyway (and View Only specifically won't allow them to modify mailboxes so is no good).
All they need to do is admin through ADU&C but if they ever did access System Manager with full admin rights they cna do just about anything.
I tried setting a few things at just the storage group level (read/change permissions + read/write properties) but they still aren't allowed to modify permissions on people's mailboxes. Is it possible to just give them rights for this at the storage group level and if so can someone tell me what permissions they granted to get it to work?
All they need to do is admin through ADU&C but if they ever did access System Manager with full admin rights they cna do just about anything.
I tried setting a few things at just the storage group level (read/change permissions + read/write properties) but they still aren't allowed to modify permissions on people's mailboxes. Is it possible to just give them rights for this at the storage group level and if so can someone tell me what permissions they granted to get it to work?
