Exchange 2013 allow users to create/modify distribution groups

We have a need in Exchange 2013 to allow standard users the capability to create/modify distribution groups.  In addition, to add/create member contacts.  Is this possible?  If so, can it be done without giving the user administrative rights to the ECP site?  If so, how?
David BarmanAsked:
Who is Participating?
 
RoninCommented:
Yes, it's possible using RBAC.
You can use existing roles from ECP (login to check the built-in ones) or by the sound of it, you might need to create a custom one with the appropriate permissions.
An example of such built-in group:
https://technet.microsoft.com/en-us/library/dd298028(v=exchg.150).aspx
0
 
David BarmanAuthor Commented:
How can I restrict them to only be able to modify a specific distribution group and not other groups / objects on the server?
0
 
RoninCommented:
Yes, that also should work, since the scope of the allowed objects the user or group will be allowed to adjust will be custom configured using the RBAC approach. Look at it this way, RBAC would allow to create ANY combination of permissions/groups/functions as needed. Because under the hood it's object to which you assign specific permissions to run specific list of CMDLETS on specific set of objects.
No question, it's a very complex and tedious topic to configure, test and deploy. I haven't seen many companies do this manually. There's a plethora of third party products that were developed specifically for this purpose.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
David BarmanAuthor Commented:
Can you recommend a technical document to do so and a product that we should consider using to do this?
0
 
RoninCommented:
The best document I can think of is the one I posted above.
As for the product I can't specifically recommend, as I didn't work with it long enough. I don't usually do much day-to-day operation support.
0
 
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Ronin (https:#a42443302)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.