How to Modify Permissions for Users and Groups
Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2006-12-20
This topic explains how to use the Exchange Management Console and the Exchange Management Shell to add or modify the permissions for an existing user or group. For example, you can add Exchange Organization permissions to an administrator who already has Exchange View-Only permissions.
To perform this procedure, the account you use must be delegated the following:
Exchange Organization Administrator role
For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.
Start the Exchange Management Console.
In the console tree, click Organization Configuration.
In the result pane, on the Exchange Administrators tab, you will see the users, their administrator roles, and the scope of their permissions for Microsoft Exchange Server 2007.
In the action pane, click Add Exchange Administrator. The Add Exchange Administrator wizard appears.
On the Add Exchange Administrator page, click Browse to select the user or group for which you want to modify permissions.
Under Select the role and scope of this Exchange administrator, select the Exchange administrator role you want. If you select the Exchange Server Administrator role, be sure to select the appropriate Exchange servers to which the user or group will have access.
On the Completion page, click Finish to complete the task.
Run the following command:
Add-ExchangeAdministrator -Role OrgAdmin -Identity Contoso\Ted
For detailed syntax and parameter information, see the Add-ExchangeAdministrator reference topic.
For instructions about how to add users or groups to an administrator role, see How to Add a User or Group to an Administrator Role.
For instructions about how to remove users or groups from an administrator role, see How to Remove a User or Group from an Administrator Role.