Admin access to single Exchange 2016 Mailbox

raj a 236 Reputation points
2021-11-17T18:35:14.053+00:00

Is it possible to grant a normal user admin access\role to one or more Exchange 2016 mailbox so that that user can manage\admin that single mailbox or some mailboxes using Exchange Admin Center?

Environment :- Exchange 2016.

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,367 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 142.3K Reputation points MVP
    2021-11-17T18:42:32.803+00:00
  2. Andy David - MVP 142.3K Reputation points MVP
    2021-11-17T19:09:35.157+00:00

    Yes, you would create a new custom scope and new custom role using that scope and assign it to a security group and put that normal admin user into that group.

    https://learn.microsoft.com/en-us/powershell/module/exchange/new-managementscope?view=exchange-ps#example-4

    Example:

    New-ManagementScope -Name "Protected Exec Users" -RecipientRestrictionFilter "Title -like 'VP*'" -Exclusive
    New-ManagementRoleAssignment -SecurityGroup "Executive Administrators" -Role "Mail Recipients" -CustomRecipientWriteScope "Protected Exec Users"

    The RecipientRestrictionFilter would be used to filter the access to those mailboxes

    What is common about the mailboxes you want the user to manage? Same Database? etc....

    https://learn.microsoft.com/en-us/powershell/exchange/recipientfilter-properties?view=exchange-ps