RBAC, assign only enable-remotemailbox access

Question

I want to create a custom role in online exchange that allows only remote mailbox command/action. Can anyone suggest how to achieve this?
enable-remotemailbox , so the servicedesk team can enable mailbox for any missing/failed accounts.

Answer 1

Hi @Austin Sundar

Please note that the command Enable-RemoteMailbox is available only in on-premises Exchange, so we should run the command and create the role on-prem as well.

We can use Get-ManagementRole -Cmdlet xxx-xxx to check what roles are need for running the command. So here for Enable-RemoteMailbox, it requires below roles:

Then you could create a new role group contain the roles above for the team you specify:

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.