Click to Rate and Give Feedback
TechNet
TechNet Library
Exchange Server
Permissions
 Understanding Management Role Scope...
Collapse All/Expand All Collapse All
More Resources
Related Help Topics
Loading...
No resources found.
more...
Related Blog Articles
Loading...
more...
Related Forum Discussions
Understanding Management Role Scope Filters

Applies to: Exchange Server 2010 SP2

Topic Last Modified: 2011-10-12

Management role scope filters can be used to define management scopes that are highly customizable. Using scope filters, you can create a scope that matches how you segment your recipients, databases, and servers so that administrators can manage only those objects they should have access to. Scope filters can use nearly any recipient, database, or server object property.

To use management role scope filters, you must be familiar with management role scopes. For more information about management role scopes, see Understanding Management Role Scopes.

Filtered custom scopes in Microsoft Exchange Server 2010 are created by using the New-ManagementScope cmdlet. The two types of filtered scopes, recipient and configuration (which consists of server and database scopes), are divided into regular scopes and exclusive scopes. The following list shows which parameter on the New-ManagementScope cmdlet to use to create each type of filtered scope:

  • Recipient regular filtered scope   To create this type of filtered scope, use the RecipientRestrictionFilter parameter.
  • Recipient exclusive filtered scope   To create this type of filtered scope, use the RecipientRestrictionFilter parameter along with the Exclusive switch.
  • Server-based configuration regular filtered scope   To create this type of filtered scope, use the ServerRestrictionFilter parameter.
  • Server-based configuration exclusive filtered scope   To create this type of filtered scope, use the ServerRestrictionFilter parameter along with the Exclusive switch.
  • Database-based configuration regular filtered scope   To create this type of filtered scope, use the DatabaseRestrictionFilter parameter.
  • Database-based configuration exclusive filtered scope   To create this type of filtered scope, use the DatabaseRestrictionFilter parameter along with the Exclusive switch.

When you create a filtered custom scope, the scope attempts to match the filter with any objects accessible within the implicit read scope of the management role. If an object is found, it's included in the results returned by the filter, and the object is made available to the management role by the custom scope. A filter can't return results that are outside of the implicit read scope of the management role.

If you specify a recipient filter using the RecipientRestrictionFilter parameter, you can use the RecipientRoot parameter to specify an organizational unit (OU) to restrict the filter to. When you specify an OU in the RecipientRoot parameter, the recipient filter attempts to match recipients that reside in that OU only, rather than within the entire implicit read scope.

To create a management scope using the filterable properties included in this topic, see Create a Regular or Exclusive Scope.

Tags What's this?: Add a tag
Community Content   What is Community Content?
Add new content RSS  Annotations
Processing
© 2012 Microsoft. All rights reserved. Terms of Use | Trademarks | Privacy Statement
Page view tracker