Add an Assignment Policy

  • Article

Applies to: Exchange Server 2010

If you want to customize the permissions that you assign to a group of end users, create a new custom management role assignment policy. The assignment policy you create can be customized to suit your end user's specific requirements. For more information about assignment policies in Microsoft Exchange Server 2010, see Understanding Management Role Assignment Policies.

After you create an assignment policy, you need to assign management roles to it and then assign users to the assignment policy. For more information, see Other Tasks later in this topic.

Looking for other management tasks related to end users? Check out Managing End Users.

What Do You Want to Do?

  • Use the Shell to create an explicit assignment policy
  • Use the Shell to create a default assignment policy

Use the Shell to create an explicit assignment policy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

Note

You can't use the EMC to create an explicit assignment policy.

To create an explicit assignment policy that can be manually assigned to mailboxes, use the following syntax.

New-RoleAssignmentPolicy <assignment policy name>

This example creates the explicit assignment policy Limited Mailbox Configuration.

New-RoleAssignmentPolicy "Limited Mailbox Configuration"

For detailed syntax and parameter information, see New-RoleAssignmentPolicy.

Use the Shell to create a default assignment policy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

Note

You can't use the EMC to create a default assignment policy.

To create a default assignment policy assigned to new mailboxes, use the following syntax.

New-RoleAssignmentPolicy <assignment policy name> -IsDefault

This example creates the default assignment policy Limited Mailbox Configuration.

New-RoleAssignmentPolicy "Limited Mailbox Configuration" -IsDefault

Important

After you create a default assignment policy, assign management roles to the assignment policy before any new mailboxes are created. New mailboxes are assigned the new default assignment policy even if the policy hasn't been assigned management roles yet. Mailboxes assigned assignment policies with no assigned management roles can't access any mailbox configuration features in the Exchange 2010 Web interface. For more information about assigning management roles, see Other Tasks later in this topic.

For detailed syntax and parameter information, see New-RoleAssignmentPolicy.

Other Tasks

After you create a new assignment policy, you may also want to: