Challenge: Employee want to create a  contact object in active directory ou, to manage it selfs. So they can add and remove external e-mail address on his manage distribution groups.

 

You need some powershell commands for this.

Most commands found here, thanks to paul for his great blog post.

https://practical365.com/exchange-server/exchange-server-role-based-access-control-in-action/

 

Get-ManagementRoleEntry “Mail Recipients\*” | Select Name

Get-ManagementRoleEntry “View-Only Recipients\*” | Select Name

 

New-ManagementRole -Parent “Mail Recipients” -Name “Custom Role – Mail Contacts”
New-ManagementRole -Parent “Mail Recipient Creation” -Name “Custom Role – Mail Contacts Creation”

 

Get-ManagementRoleEntry “Custom Role – Mail Contacts\*” | Where {$_.Name -notlike “*MailContact”} | Remove-ManagementRoleEntry
Get-ManagementRoleEntry “Custom Role – Mail Contacts Creation\*” | Where {$_.Name -notlike “*MailContact”} | Remove-ManagementRoleEntry

 

Get-ManagementRoleEntry “Custom Role – Mail Contacts\*”

 

Get-ManagementRoleEntry “Custom Role – Mail Contacts Creation\*”

 

New-ManagementRole -Parent “View-Only Recipients” -Name “Custom Role – View-Only Recipients”

 

Get-ManagementRoleEntry “Custom Role – View-Only Recipients\*” | Where {$_.Name -notlike “*MailContact”} | Remove-ManagementRoleEntry

 

Add-ManagementRoleEntry “Custom Role – View-Only Recipients\Get-OrganizationalUnit”
Add-ManagementRoleEntry “Custom Role – View-Only Recipients\Get-Recipient”
Add-ManagementRoleEntry “Custom Role – View-Only Recipients\Get-Contact”

 

Get-ManagementRoleEntry “Custom Role – View-Only Recipients\*”

 

New-RoleGroup –Name “Contact Editor” –Roles “Custom Role – View-Only Recipients”, “Custom Role – Mail Contacts”, “Custom Role – Mail Contacts Creation”