Unified Messaging Permission Delegation in Exchange Server 2007
Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-06-06
In many organizations, there are separate administrators for Microsoft Exchange, the Active Directory directory service, and the telecommunications equipment. Therefore, administrative functions must be delegated to maintain distinct boundaries between different levels of administrative permissions. This is known as a split permissions model. When you use the split permissions model, certain rights must be delegated to all parties so that they may complete their prescribed job functions without crossing the operational and security boundaries. This topic briefly introduces the split permissions model and contains links to topics that can help you plan and implement a split permissions model for Microsoft Exchange Server 2007 Unified Messaging.
Organizations that implement a split permissions model typically want to grant permissions only to a group of specific administrators. This ensures accountability and helps enhance security. However, working with Active Directory permissions that are related to Microsoft Exchange can be a complex task. The following topics will help Exchange architects understand how they can implement a split permissions model in Unified Messaging:
Some of the following topics discuss how to plan and configure a split permissions model for Unified Messaging. The following list also includes other permission-related topics to review before you implement a split permission model: