Help - I am unable to set an email alias in an Azure Runbook

Question

I have a need to create email aliases for exchange accounts. I am attempting to do this with an Azure Automation Runbook.

Connect-ExchangeOnline -ManagedIdentity -Organization "myorg.onmicrosoft.com" 
# Interact with query parameters or the body of the request.
$name = $Request.Query.Name
if (-not $name) {
    $name = $Request.Body.Name
}
$user = $Request.Query.User
if (-not $user) {
    $user = $Request.Body.User
}
Get-Mailbox -Identity $name | Format-List  
#Set-Mailbox $user -EmailAddresses @{add="{"+$name+"@myorg.com"}

Get-Mailbox is working but set-mailbox is failing with Failed (Unauthorized).

I have a managed service account with Exchange online permissions. Which I know is working because Get-Mailbox is working.

Does anyone know what permissions need to be set on this to allow this from set-mailbox Azure powershell in this scenario?

Answer 1

you need to assign the "Exchange Recipients Management" role, which grants the necessary permissions to modify mailbox properties, including email addresses.