Add the Mailbox Import Export Role to a Role Group
By default, the Mailbox Import Export management role isn't included in any of the built-in role groups, such as the Organization Management role group. To import or export mailbox data, you need to add the Mailbox Import Export management role to a role group.
You can add the Mailbox Import Export role to a role group with no scope between the role and the role group. When you do this, the implicit read and implicit write scopes of the role apply. For details about how to add the Mailbox Import Export role to a role group with a predefined scope, see Add a Role to a Role Group.
Note
The Mailbox Import Export role also grants full access rights to all mailboxes.
Looking for other management tasks related to importing and exporting mailbox data? Check out Managing Mailbox Import and Export.
Prerequisites
- Because you can't add roles to built-in role groups, you need to create a role group to which you can add the Mailbox Import Export role. For detailed instructions, see Create a Role Group.
- Read the following topics:
- Be aware that role assignments are additive. This means that all the roles are added together when they're evaluated. If two roles are assigned to a user and one role contains a cmdlet but the other doesn't, the cmdlet will still be available to the user.
- By default, role assignments, including the Organization Management role, don't grant the ability, called role delegation, to assign roles to other users. Role delegation is an advanced task. To enable a user to assign roles to other role groups, see Delegate Role Assignments.
Use the Shell to add the Mailbox Import Export role to a role group with no scope
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
Note
You can't use the EMC to add the Mailbox Import Export role to a role group with no scope.
This example assigns the Mailbox Import Export role to the Enterprise Support security group.
New-ManagementRoleAssignment -Name "Import Export_Enterprise Support" -SecurityGroup "Enterprise Support" -Role "Mailbox Import Export"
For detailed syntax and parameter information, see New-ManagementRoleAssignment.
Other Tasks
After you add the Mailbox Import Export role to a role group, you may also want to: