User is not allowed to call Get-RecipientPermission Even as a global admin

Question

Hi,

Me and my colleague are global admins and we had the right to do everything. All of suddent we cannot manage mailboxes, I tried to give a user permission on a shared mailbox I get this error : User is not allowed to call Get-RecipientPermission, Also I assigned my self Exhange admin, Recipient management all roles that might give me access still cannot solve it.

Answer 1

Hi Noah,

I'm having the same issue all of a sudden. As a global admin, I've always been able to add accounts to the delegation of mailboxes but now I'm receiving the erorr below in EAC and using Get-EXORecipientPermission cmdlet.

EAC:

PS:

Get-EXOMailboxPermission : An error occurred while processing this request.. {"error":{"code":"Unauthorized","message":"User is not allowed to call

Get-MailboxPermission","innererror":{"message":"User is not allowed to call

Get-MailboxPermission","type":"Microsoft.Exchange.Admin.OData.Core.ODataServiceException","stacktrace":""}}}. An error was read from the payload. See

the 'Error' property for more details..

Any ideas?

Thank you!!

Answer 2

Hello,

Sorry I missed all your comments. I was able to resolve this issue. Global Admin is part of a built in group named Company Administrator. So I assigned Company admin to some of the roles I want and it resolved my issue, for example Recipient management role in Exchnage has Company Administrator Assigned to it.