This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 6%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Hey Everyone,
I am working on a permissions issue. I gave a user O365 permissions of Groups Administrator, Exchange Recipient Administrator and User Administrator. I also gave them a role in Exchange Online that has the Distribution Groups role assigned to it. I want the user to be able to create and edit Distribution lists in Exchange Online. I have it were the user can build the Distro groups, however, they can't edit them. When they click to edit a group in the new Exchange Admin center and search for a user to add it returns no users found. However, if they use the classic Exchange Admin center they can edit the Distro groups successfully. I must be missing something here. What permission do I need to grant for the user to be able to edit the Distro group in the New Admin center?
I would suggest you remove the Office 365 permission, then use Exchange RBAC permission for this mailbox: Create a new admin group which contained those "Distribution Groups", "Mail Recipient Creation" and "Mail Recipients" admin groups in it. It could work in both the new and old admin center.
If you want to know which admin group needs to be used, you can use the command below to check it:
Get-ManagementRoleEntry -Identity *\<Cmdlet>
Such as, if you want to manage mailbox (Get-Mailbox, Set-Mailbox) and permission (Add-MailboxPermission) :
We can see those commands are all contained in "Mail Recipients", so we could give this permission to the mailbox we want.
Thanks for the response!
Unfortunately, I tried using the roles you suggested and they did not resolve the issue. It's odd that the user has permissions in the Old Exchange Admin Center, but not the new.
Thanks,
Trent
Could you provide a screenshot about how it behavior in the new admin center? It could help us narrow down this issue.
Absolutely! I have posted it below. There is no error message it just can't find user's when searching to add a user. Again, this works normally in O365 groups and for Distro groups in the Classic Exchange Admin center.
Do you want to add mailbox as distribution group member (Add-DistributionGroupMember) rather than delegate permission? If so, you need to have one of those RBAC permission below:
As posted above, if you want to have some permission, you could use the command below to check which RBAC role this permission contained, then give the related role to your mailbox:
Get-ManagementRoleEntry -Identity *\<Cmdlet>
Put the entire email address in there when you search.
So for example:
Trent.Becker@Company portal .com
then see if it finds it. the Searching in the new admin center is really picky
Thanks for the response Andy! I am really embarrassed to say I didn't try this before sending this in. It didn't cross my mind that it may need the full email. However, unfortunately that did not resolve the issue.
I appreciate the response!
Hi @Trent Becker ,
I think you should assign a correct role for performing those tasks.
Hopefully, this helps you.
https://learn.microsoft.com/en-us/exchange/permissions-exo/permissions-exo#role-groups
Hi TKujala,
What would be the correct permission? There isn't an error that appears when trying to make the change and I don't see anything specific in the roles that distinguishes between the new and old Admin center.
Thanks,
Trent Becker