First we’ll start off with the Permissions tab in the console. Here we have the Admin Roles for Exchange Server 2013:
If you take a look at the Exchange 2010 version of the Administrative Roles, you will see that one additional role was added in 2013 – Compliance Management.
The Compliance Management role has the following permissions assigned to it:
So what can we do on this tab exactly? Well, you can create new custom Admin Roles for your Exchange environment. Say you have a group of users that need to be able to create mailboxes, review Exchange servers settings but not change them, migrate mailboxes and they need to handle mailbox searches for discovery purposes. For this case you could create a custom Admin Role that encompasses all of these permissions.
For the sake of this exercise we’ll call this group the Senior Help Desk Group. Click on the ‘+’ button to create the new group:
To add the permissions needed, click on the ‘+’ under Roles and add the groups as shown:
Next click the ‘+’ under Members and add the people that need to be in that group:
So now you have the name, description, roles and members defined, click save at the bottom. We now have a custom Admin Role:
In addition to Admin Roles, Exchange 2010 and 2013 allowed the creation of User Roles:
So what can we use User Roles for? In Exchange Server 2013 User Roles are settings for users allowing them more control of their messaging environment:
So on this tab, just like Exchange 2010, you can create a new User Role. Click on the “+” button and then give the new role a name, description and check what needs to be assigned to the roles:
Click Save and you will see the new role you created.
To assign this role to a user you must use PowerShell. See the below screenshot as an example:
The last tab on this screen is the “OWA Policy” one. Here we can create new OWA experiences for your users:
Default New Policy Screen:
Select “more options” and this reveals these settings as well:
In the case of this new policy, I turned off Instant Messaging and Text Messaging. And then saved it:
Once your new Outlook Web App Policy has been created, you will need to apply it to some mailboxes. To do so, simply highlight the mailboxes listed in Recipients:
Once highlighted, click on “”Assign a policy” under Outlook Web App on the right side:
The click browse to find the policy you created:
Click OK and then Save. To verify it was assigned properly, highlight a mailbox and click “Edit Details under Email Connectivity/Outlook Web App.
To see what OWA looks like with the new policy, see the below series of screenshots:
BEFORE policy change (1)
AFTER policy change (1)
BEFORE policy change (2)
AFTER policy change (2):
That’s it for the Permissions Tab. In the next part of this series we will cover Compliance Management.
