Microsoft® Exchange Server 2010 Inside Out

Role groups

Roles can be assigned on an individual basis or on a group basis. Although roles provide the granularity necessary to break down all the different tasks performed by a typical Exchange administrator, it would be far too complex to assign tasks through individual roles. Role groups provide a convenient method to gather together the roles necessary to perform higher level tasks such as “Mailbox Search” and avoid the need to assign the 11 separate roles that would otherwise be required. It’s much easier to manage the assignment of a single role group than it is to manage 11 separate role assignments, and it’s also less likely that administrators will make mistakes and create security problems when they manage RBAC through role groups. ...