Microsoft® Exchange Server 2010 Inside Out

Exchange Control Panel and roles

Curiously, apart from a link to ECP in the Toolbox, EMC includes no UI to deal with roles, role groups, assignments, and policies. Everything to do with RBAC in terms of end users (and their roles) is processed through ECP and anything else has to be done with EMS. The logic for this decision might be that Microsoft believes that EMC is concerned with day-to-day management operations that occur frequently and it is unlikely that administrators will want to change roles or role group definitions very often. Indeed, if Microsoft’s design works, most deployments are likely to accept the default set of definitions and never make a change.

The Exchange 2010 version of ECP allows administrators to assign roles to users ...