Client Access Permissions

 

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

The permissions required to perform tasks on the Client Access server vary depending on the procedure being performed or the cmdlet you want to run. For more information about Client Access features, see Client Access.

To find out what permissions you need to perform the procedure or run the cmdlet, do the following:

1. In the table below, find the feature that is most related to the procedure you want to perform or the cmdlet you want to run.

2. Next, look at the permissions required for the feature. You must be assigned one of those role groups, an equivalent custom role group, or an equivalent management role. You can also click on a role group to see its management roles. If a feature lists more than one role group, you only need to be assigned one of the role groups to use the feature. For more information about role groups and management roles, see Understanding Role Based Access Control.

3. Now, run the Get-ManagementRoleAssignment cmdlet to look at the role groups or management roles assigned to you to see if you have the permissions that are necessary to manage the feature.

   Note

   You must be assigned the Role Management management role to run the Get-ManagementRoleAssignment cmdlet. If you don't have permissions to run the Get-ManagementRoleAssignment cmdlet, ask your Exchange administrator to retrieve the role groups or management roles assigned to you.

If you want to delegate the ability to manage a feature to another user, see Delegate Role Assignments.

Note

Some features may require that you have local administrator permissions on the server you want to manage. To manage these features, you must be a member of the Local Administrators group on that server.

Client Access Server Permissions

You can configure any of the following for the Client Access server role.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Client Access server settings	Server Management
Client Access server security settings	Server Management
Client Access server management settings	Server Management
Client Access server user settings	Server Management
Client Access server array settings	Organization Management Server Management
Client Access user settings	Server Management
RPC Client Access settings	Organization Management Server Management View-Only Organization Management
Client Access service e-mail channel settings	Organization Management Server Management
Reset Client Access virtual directories	Organization Management Server Management

Exchange ActiveSync Permissions

You can configure any of the following for Exchange ActiveSync.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Exchange ActiveSync settings	Organization Management Server Management
Exchange ActiveSync virtual directory settings	Organization Management Server Management
Exchange ActiveSync mailbox policy settings	Organization Management Server Management
Exchange ActiveSync user settings	Recipient Management
Exchange ActiveSync server settings	Organization Management Server Management
Exchange ActiveSync security settings	Organization Management Server Management
Exchange ActiveSync device settings	Recipient Management

Autodiscover Permissions

You can configure the following for the Autodiscover service.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Autodiscover virtual directory settings	Organization Management Server Management View-Only Organization Management Delegated Setup Hygiene Management
Test Autodiscover service connectivity	Organization Management Server Management View-Only Organization Management
Autodiscover service configuration settings	Organization Management Server Management View-Only Organization Management Delegated Setup Hygiene Management
Autodiscover service site affinity	Organization Management Server Management

Availability Service Permissions

You can configure the following for the Availability service.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Availability service address space settings	Organization Management View-Only Organization Management
Availability service configuration settings	Organization Management Server Management View-Only Organization Management

Client Throttling Permissions

You can configure the following for client throttling.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Client throttling settings	Organization Management View-Only Organization Management

Exchange Control Panel Permissions

You can configure the following for Exchange Control Panel (ECP).

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Exchange Control Panel virtual directory settings	Organization Management View-Only Organization Management
Test ECP	Organization Management
User reporting	Organization Management
User options	Organization Management

Exchange Web Services Permissions

You can configure the following for Web Services virtual directories.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Exchange Web Services virtual directory settings	Organization Management
Test Exchange Web Services	Organization Management Server Management
Test Outlook Web Services	Organization Management

Outlook Anywhere Permissions

You can configure and manage the following settings for Outlook Anywhere.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
SSL for Outlook Anywhere	ISA Server Enterprise Administrator
SSL offloading for Outlook Anywhere	Organization Management Server Management
Authentication for Outlook Anywhere	Organization Management Server Management
Outlook Anywhere configuration (enable, disable, change, view)	Organization Management Server Management View-Only Organization Management Delegated Setup Hygiene Management
RPC over HTTP Proxy component	Local Server Administrator
Test Outlook Anywhere connectivity	Organization Management View-Only Organization Management Server Management

Outlook Web App Permissions

You can use the following features to view Outlook Web App settings, control security and user access to Outlook Web App, and test Outlook Web App connectivity.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Outlook Web App virtual directories	Organization Management Server Management
Outlook Web App mailbox policies	Organization Management Recipient Management
View Outlook Web App virtual directories	Organization Management Server Management View-Only Organization Management Delegated Setup Hygiene Management
View Outlook Web App mailbox policies	Organization Management Recipient Management View-Only Organization Management Delegated Setup Hygiene Management
Test Outlook Web App connectivity	Organization Management Server Management View-Only Organization Management
IIS Manager	Local Server Administrator
Registry Editor	Local Server Administrator
Text editor	Local Server Administrator
Graphics editor	Local Server Administrator
ISA Server 2006	ISA Server Enterprise Administrator

POP3 and IMAP4 Permissions

You can configure the following for POP3 and IMAP4.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
POP3 settings	Organization Management View-Only Organization Management
IMAP4 settings	Organization Management View-Only Organization Management
Test POP3 settings	Organization Management
Test IMAP4 settings	Organization Management

Windows PowerShell Virtual Directory Permissions

You can configure the following for Windows PowerShell.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
PowerShell settings	Organization Management
Test PowerShell	Organization Management

Text Messaging Permissions

You can configure the following for Text Messaging.

Users who are assigned the View-Only Management role group can view the configuration of the features in the following table. For more information, see View-Only Organization Management.

Feature	Permissions required
Text messaging settings	Recipient Management
Text messaging user settings	Recipient Management
Text messaging notification settings	Recipient Management

 © 2010 Microsoft Corporation. All rights reserved.