Forum Discussion
Creation of customrole that allows only creation of Mailenabled Security groups.
In Exchange, mail-enabled security groups and regular distribution groups are created through the same cmdlet (New-DistributionGroup), so limiting the creation to only security groups is not supported.
Thanks for the anwser :) TaeYounAnn
I'm more than fine with allowing the custom role to create ordinarie distributionsgroups aswell but the role can ONLY create normal distribution groups now with the Gui.
to my understanding allowing New-DistributionGroup would allow the members of the role to create both secuirty groups in the gui and distributiongroups but that is not the case.
Didnt wanna do the whole screen as a screenshot and post it here but this is from our ECP and the option to create security groups is not in there :/Thanks for answer HansYolo
This is because only distribution groups are visible in ECP.
New-DistributionGroup is designed to create distribution groups by default.
Security groups are created based on New-DistributionGroup parameters.
The order is as follows:
New-DistributionGroup (Base)
New-DistributionGroup -Type Security (Security Group)
Therefore, it is impossible to restrict or expose only security groups through RBAC in the GUI.
