Microsoft Exchange Server 2016 PowerShell Cookbook - Fourth Edition

How it works...

The built-in management roles cannot be modified, so when we want to customize an existing role to meet our needs, we need to create a new custom role based on an existing parent role. Since we know that the built-in Mail Recipient Creation role provides the cmdlets that our support group will need, the first thing we must do is create a new role by copying the Mail Recipient Creation role, called Employee Recipient Creation.

One of the requirements in our scenario was that support personnel should not be able to remove recipients from the organization, so we edited our custom role to get rid of any cmdlets that could be used to remove recipients from the Employees OU, or from any other location in the Active Directory. We ...