To restart a service takes local administrator privileges. Accessing the Exchange logs via cmd.exe/powershell/FileExplorer requires local admin privileges. If you want to search using the EMS or EAC, you need View-Only Org Admin and Discovery Admin.
View mailbox is Recipient Admin. View account (most settings) from AD doesn’t require special privileges. Some settings require Domain Admin. To update an address list or an OAB requires Organization Admin. Basically, you need everything. Domain Admin, Organization Admin, Discovery Admin. From: [email protected] [mailto:[email protected]] On Behalf Of Candee Sent: Tuesday, June 30, 2015 11:41 AM To: [email protected] Subject: [Exchange] Exchange permissions All, I am trying to help one of our sister companies troubleshoot some delivery issues. I am not sure what rights/roles I will need in their Domain and Exchange org to be able to do this. I want to be able to search the Exchange Logs, restart services, update the address book, view mailbox/account settings, etc. What roles/groups/etc should I ask them to add my account to? I don't want to start out with view only, then say oh, hey, I can't increase the logging levels... Any hints much appreciated! Thanks! Candee
