Add Administrative Permissions for Users to Access Public Folders
Applies to: Exchange Server 2010
There are two methods by which a user is granted the permissions to administer public folders:
- Public Folder Management role group
Adding the user to the Public Folder Management role group is similar to assigning the Public Folder Administrator role in Exchange 2007. It grants the user all the permissions necessary for managing public folders. - PublicFolderAdminstrativePermission cmdlet set
Using these cmdlets is more granular and gives you the ability to specify the scope for the user in the organization by modifying the database's access control lists (ACLs).
Looking for other management tasks related to public folder permissions? Check out Managing Public Folder Permissions.
Use the Shell to add a user to the Public Folder Management role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
Note
You can't use the EMC to add a user to the Public Folder Management role group.
This example adds the user Tony to the Public Folder Management role group.
Add-RoleGroupMember -Identity "Public Folder Management" -Member Tony
For detailed syntax and parameter information, see Add-RoleGroupMember.
Use the Shell to add administrative permissions for a user to access a specific public folder
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder administrative permissions" entry in the Mailbox Permissions topic.
Note
You can't use the EMC to add administrative permissions for a user to access a specific public folder.
Note
Adding permissions to a specific folder also requires that the user has the correct Role Based Access Control (RBAC) permissions assigned so that they can access the public folder cmdlets.
This example adds AllExtendedRights permissions for the user Chris to access the public folder Marketing and all the public folders under it.
Add-PublicFolderAdministrativePermission -Identity "\Marketing" -User "Chris" -AccessRights AllExtendedRights -InheritanceType SelfAndChildren
For detailed syntax and parameter information, see Add-PublicFolderAdministrativePermission.