Microsoft Exchange 2016
I have a script run under a normal domain user through scheduled tasks to find distribution groups that match a certain criteria and set them to allow external senders. The user has a role with the Distribution Group entry permissions (which includes Get & Set-DistributionGroup). I've tested this user via the EAC and it can see the groups I want and change the RequireSenderAuthenticationEnabled attribute.
From PowerShell as the user typing the commands individually or as the user using the script, the Set-DistributionGroup cmdlet throws an error. I can load the snap-in, run the Get for the results I want but cannot run the set. I understand that giving the user Org Management and/or Admin rights will work around this, but to do so defeats the purpose of the roles and gives the user *far* more access than is needed.
Set-DistributionGroup : No provisioning handler is installed.