SUMMARY
Use the Permissions property page to specify the rights that users or groups have on the objects within the Exchange Administrator program. You delegate permissions to a user or group by assigning them a role.
Roles are sets of rights that define how much access and what type of access a user or group has.
ORGANIZATION OBJECT
For the Organization object, Microsoft Exchange provides Administrator, Permissions Administrator, Service Account Administrator, and User default roles. You can also create custom roles.
Default Roles and Rights for Organization object:
Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, and Delete.
Permissions Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, and Modify Permissions.
Service Account Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, Replication, and Modify Permissions.
User Role: Modify User Attributes only.
SITE OBJECT
For a Site object, Microsoft Exchange provides Administrator, Permissions Administrator, Send As, Service Account Administrator, User, and View Only Administrator default roles. You can also create custom roles.
Permissions you set on the Site object are inherited by the site recipients container. For example, a user with Mailbox Owner rights at the messaging site level automatically inherits Mailbox Owner rights for all recipients in the recipients container.
Default Roles and Rights of Site Object:
Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, and Logon Rights.
Permissions Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, Logon Rights, and Modify Permissions.
Send As Role: Send Messages As a Mailbox. This is different from send on behalf of permissions, because the person receiving the message cannot tell that the message has been sent by someone else.
Service Account Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, Send As, Mailbox Owner, Logon Rights, Replication, Modify Permissions.
User Role: Modify User Attributes, Send As, Mailbox Owner Send As Role: Send As only.
View Only Administrator Role: Logon Rights only.
CONFIGURATION OBJECT
For the Configuration object, Microsoft Exchange provides Administrator, Permissions Administrator, Service Account Administrator, Send As, and User roles. You can also create custom roles.
Permissions you set on the Configuration object are inherited by all objects and containers within the Configuration object. For example, a user with Modify Permissions rights on the Configuration object can modify permissions on all subordinate containers and objects.
Default Roles and Rights for Configuration Object:
Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, and Delete.
Permissions Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, and Modify Permissions.
Service Account Administrator Role: Add Child, Modify User Attributes, Modify Administrator Attributes, Delete, Replication, and Modify Permissions.
Send As Role: Send As Right only.
User Role: Modify User Attributes only.
MORE INFORMATION
Microsoft Exchange rights are defined below. These rights are available for assigning permissions to a user or group on the Organization, Site, and Configuration objects within Exchange Administrator.
"Add Child" allows a user to create objects below this object.
"Modify User Attributes" allows a user to modify user-level attributes associated with an object. A user with this permission can modify the members of a distribution list.
"Modify Admin Attributes" allows a user to modify administrator-level attributes associated with an object. A user with this permission can modify the job title and display name fields in a mailbox.
"Delete" allows a user to delete an object.
"Replication" allows a user to replicate directory information with other servers.
"Modify Permissions" allows a user to modify permissions on existing objects. Without this permission, a user can grant permissions to new mailboxes but cannot modify permissions on existing ones.
"Send As" allows a user to send messages as a mailbox. This is different from Send On Behalf Of permissions, because the person receiving the message cannot tell that the message has been sent by someone else. You delegate Send On Behalf Of permissions using the Delivery Options property page.
"Mailbox Owner" allows a user to log on to a mailbox and use it to send and receive messages.
"Logon Rights" allows a user to log on to any server in the site using the Administrator program.
ADDITIONAL INFORMATION
The Service Account Administrator role maintains the highest level of rights and permissions when assigned to a user or group. By default, the account specified as the Exchange Service account is granted the Service Account Administrator role on the Organization, Site, and Configuration objects.
Within Exchange Administrator, on the Tools menu, point to Options, and then click the Permissions tab to select the option for the Display Rights for Roles on Permissions page. When this option is selected, the Exchange Administrator program displays the list of rights on the Permissions tabs of Object properties.
About our Search Engine
Information on our site is produced from a variety of recourses including internal support professionals, Microsoft Product Support, Cisco Systems Support, and other third-party resources. The information is provided as a resource only and no warranty is given nor implied as to their accuracy. Our search engine is based on Microsoft Office SharePoint Server (MOSS) 2007 Search Technologies and filtered to produce the best possible results for our end users.
Overview of Exiis Corporation
Exiis Corporation is a client-centric, outsourced professional IT firm specializing in Microsoft Products and Technologies. Our extensive experience with network management and security, application support, and Cisco networking products make us an ideal partner when local resources and IT departments need additional support with their network services.
Microsoft and Cisco Support Technology
Our teams of professional consultants and support engineers have been providing local and remote network, server, and application support for nearly two decades, making us one of the oldest, experienced, and trusted outsourced IT service providers. Our unique “Pay-As-You-Go” model allows business organizations of all sizes to determine exactly how much they would like to spend on their outsourced IT budget, without the hassle of complicated monthly recurring fees or long-term contracts
Remote “Help Desk” Solutions
Exiis Corporation’s remote “Help Desk”, staffed by a team of Microsoft Certified Support Professionals can address questions in a quick, efficient, time-saving manner that frees your IT team from having to research issues products that are new to them to or not normally maintained on a daily basis.
Microsoft Exchange Server 2007
Microsoft Exchange Server is the premier messaging and collaboration server, providing more than simple email messaging. For example, Microsoft Exchange Server provides many solutions for task management, calendar sharing, and appointment setting. The latest release takes into consideration intelligent routing features, regulatory requirements, unified messaging, and advanced anti-spam solutions. Even if you are using another email solution, such as an ISP POP 3, Novell, or even Notes, Exiis can migrate that information from your legacy server into the latest release of Microsoft Exchange Server. The Microsoft Exchange client, Microsoft Outlook, is increasingly becoming more intelligent—set-up is performed seamlessly with the latest release, where end-users simply supply their email address—Exchange Server handles the remaining set-up processes, requiring less time from internal IT support departments and ensuring the client is set-up correctly, the first time, without the hassle of continuing calls into the Help Desk.
Access to Resources
Exiis Corporation offers access to the most prestigious collection of Microsoft Certified Professionals. Many organizations have some sort IT Support available to them, either internally or by a local computer provider. Exiis Corporation is able to augment the local IT talent with additional knowledge and experience in Microsoft Products and Technologies such as:
· Microsoft Customer Relations Manager (CRM)
· Microsoft Office SharePoint Server (MOSS)
· Microsoft Exchange Server
· Microsoft Great Plains Dynamics (GP)
· Microsoft Internet Security and Acceleration Server (ISA)
· Microsoft Live Communications Server (LCS)
· Microsoft Operations Manager (MOM)
· Microsoft Small Business Server (SBS)
· Microsoft SQL Server
· Microsoft Systems Management Server (SMS)
· Microsoft Windows Server
For Additional Support, please see:
http://exchange.exiis.net/exchange-server-support/Pages/default.aspx