timgreen7077
asked on
RBAC in Exchange 2010
Can anyone assist with the below EMS error I recieve trying to add a role assignment with an OU scope:
WARNING: The domain.com/Group Objects/Stellar management scope won't be applied to the management role assignment for the Stellar DistributionGroups Management management role because the implicit scope on this role, MyDistributionGroups, is smaller than the specified scope.
I'm using a custom role named StellarDistributionGroups Management with the following entries (parent is distribution groups):
Add-DistributionGroupMembe r
Get-DistributionGroup
Get-DistributionGroupMembe r
Get-Group
Get-Recipient
New-DistributionGroup
Remove-DistributionGroupMe mber
Set-DynamicDistributionGro up
Set-Group
Update-DistributionGroupMe mber
Set-DistributionGroup
I'm running the following cmdlets:
[PS] C:\>New-ManagementRoleAssi gnment -Name "Stellar DL Managers" -SecurityGroup "stellar Distribution Group Managers" -Role "Stellar DistributionGroups Management" -RecipientOrganizationalUn itScope "domain.com/Group Objects/SA"
WARNING: The domain.com/Group Objects/Stellar management scope won't be applied to the management role assignment for the Stellar DistributionGroups Management management role because the implicit scope on this role, MyDistributionGroups, is smaller than the specified scope.
I'm using a custom role named StellarDistributionGroups Management with the following entries (parent is distribution groups):
Add-DistributionGroupMembe
Get-DistributionGroup
Get-DistributionGroupMembe
Get-Group
Get-Recipient
New-DistributionGroup
Remove-DistributionGroupMe
Set-DynamicDistributionGro
Set-Group
Update-DistributionGroupMe
Set-DistributionGroup
I'm running the following cmdlets:
[PS] C:\>New-ManagementRoleAssi
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have been really busy last week. I will reattempt this today or tomorrow and update. Thanks.
ASKER
Thanks that fixed my issue.
there is a conflict in scope which you are specifying. try setting the same scope as StellarDistributionGroups mgmt role.