question

TrentBecker-6165 avatar image
0 Votes"
TrentBecker-6165 asked KyleXu-MSFT commented

Exchange Online Permissions

Hey Everyone,
I am working on a permissions issue. I gave a user O365 permissions of Groups Administrator, Exchange Recipient Administrator and User Administrator. I also gave them a role in Exchange Online that has the Distribution Groups role assigned to it. I want the user to be able to create and edit Distribution lists in Exchange Online. I have it were the user can build the Distro groups, however, they can't edit them. When they click to edit a group in the new Exchange Admin center and search for a user to add it returns no users found. However, if they use the classic Exchange Admin center they can edit the Distro groups successfully. I must be missing something here. What permission do I need to grant for the user to be able to edit the Distro group in the New Admin center?

office-exchange-online-itpro
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@TrentBecker-6165

I would suggest you remove the Office 365 permission, then use Exchange RBAC permission for this mailbox: Create a new admin group which contained those "Distribution Groups", "Mail Recipient Creation" and "Mail Recipients" admin groups in it. It could work in both the new and old admin center.

If you want to know which admin group needs to be used, you can use the command below to check it:


 Get-ManagementRoleEntry -Identity *\<Cmdlet>

Such as, if you want to manage mailbox (Get-Mailbox, Set-Mailbox) and permission (Add-MailboxPermission) :
198402-qa-kyle-10-12-16.png
We can see those commands are all contained in "Mail Recipients", so we could give this permission to the mailbox we want.

0 Votes 0 ·

Thanks for the response!

Unfortunately, I tried using the roles you suggested and they did not resolve the issue. It's odd that the user has permissions in the Old Exchange Admin Center, but not the new.

Thanks,
Trent

0 Votes 0 ·
KyleXu-MSFT avatar image KyleXu-MSFT TrentBecker-6165 ·

Could you provide a screenshot about how it behavior in the new admin center? It could help us narrow down this issue.

0 Votes 0 ·
Show more comments
TKujala avatar image
0 Votes"
TKujala answered TrentBecker-6165 commented

Hi @TrentBecker-6165,

I think you should assign a correct role for performing those tasks.

Hopefully, this helps you.

https://docs.microsoft.com/en-us/exchange/permissions-exo/permissions-exo#role-groups

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi TKujala,
What would be the correct permission? There isn't an error that appears when trying to make the change and I don't see anything specific in the roles that distinguishes between the new and old Admin center.

Thanks,
Trent Becker

0 Votes 0 ·
AndyDavid avatar image
1 Vote"
AndyDavid answered TrentBecker-6165 commented

Put the entire email address in there when you search.

So for example:

Trent.Becker@contoso.com

then see if it finds it. the Searching in the new admin center is really picky

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the response Andy! I am really embarrassed to say I didn't try this before sending this in. It didn't cross my mind that it may need the full email. However, unfortunately that did not resolve the issue.

I appreciate the response!

0 Votes 0 ·