Many organizations like to give specific users rights to manage the membership of designated distribution
groups this has been a common practice for years.
In previous versions of exchange while users have typically modified the memberships of the groups they
have rights to from within Outlook.
They now have the added capability to manage these groups from the web based exchange control panel
ECP exchange 2010 introduced and use security Modahl that changed the way you can delegate these rights
and.
We'll take a look at what you need to do in exchange 2016 to allow managers to modify their memberships
of the distribution groups.
The first thing you need to do is sign the bill in my distribution group's role to the default role
assignment policy to do list just type new management role assignment role model distribution groups
policy default role assignment policy.
Next set the managed by property of the distribution group that needs to be modified so that distribution
Group Sales Manager by David Jones for example.
After running the given command Dave Jones has the ability to modify the membership of the sales distribution
group through the outlook or the Exchange management shell in order to allow managers to modify the
membership of a group.
We need to do some initial configuration through the exchange to solve and 16 security Modell which
is called Roll based access control or are back there.
My distribution group's role is on our back management role that allows users to view remove and add
members to distribution groups where they have been added to the managed by property.
By default my distribution group management role is not a sign to add one and the third step we added
this role to the default roll assignment policy that is assigned to all users by default.
Please know that in addition to you than the shell you can assign to my distribution group's management
thrall to the default role assignment Bolasie you then ECP.
Our next step was that we are scient user to the managed by property or the sales distribution group.
They are managed by attributive multi-valued property that will accept multiple users.
If you need to allow several people to manage a distribution group the reason that my distribution groups
thrall is not enabled by default is because in addition to allowing users to modify the groups that
they own it allows them to create new distribution groups from within the ECB.
While some organisations may like this feature others may not be able to allow this since the provision
of groups may need to be tightly controlled.
Make sure you keep this in mind before implementing this solution.
So if you need to program to use or thrown great in their own distribution groups then you do not want
to sign my distribution group roll.
Instead you'll need to create a custom are back role.
This can be accomplished.
Then they change management shell to implement a custom are back roll that will only allow users to
modify distribution groups that they all need to perform a few steps.
The first thing you need to do is create a child troll based on the existing My distribution group's
management role when it to run a new management role.
Command left his name parameter which is my DG cost him and current parameters which is my distribution
groups.
After running this command to me.
Should should now have a new role called my Digic cost him that contains all the common outlets that
will allow the user to add and remove distribution groups using the following commands will remove those
command lets from the roll we can type remove management role and my Digic custom backslash new distribution
group and remove management role and trade and we'll remove distribution group command let let's modify
the role so that under the command glass that can get at or remove distribution group members are available
to the users.
And finally we can assign the customer all to the default role assignment policy reach out of the box
is already applied to every mailbox and level going to real time.
New management role assignment or all my Digic cost them all is the default role assignment policy.
Now that these Kustom are back are all has been implemented we can simply add the users to that managed
by property ovine and distribution group and they will be able to add members to add or remove members
from that group.
However they will be able to delete the group or create a new distribution group which accomplishes
the goal.