I have a few AD admins whose accounts are in the Account Operators group in the domain. It seems that the admins have no issues managing user accounts as for creating, resetting passwords and so on.
There are two issues I am seeing so far:
1. The Account Operators are not able to update the "Email" attribute - see attached.
2. The Account Operators are not able to update the "ProxyAddresses" attribute - see attached.
I have tried to custom delegate a test account but not yet success.
Someone who knows please advise what to select to grant more permission. .
Thanks in advance.