Forum Discussion
Exchange RBAC Challenge: Restricting Admin Level Access to Selected Mailboxes
Hi Exchange Brain Trust, I'm looking to implement a restriction for a specific group of admins (let's say Service Desk L1 team) so they do not have administrative access to executive EXO mailboxes (...
Exclusive scopes is what you need: https://learn.microsoft.com/en-us/exchange/understanding-exclusive-scopes-exchange-2013-help
Keep in mind that anyone with sufficient permissions to manage scopes/role assignments can grant himself access. For even better protection, you can configure PAM too... but a GA can override that as well.
VasilMichev​ Appreciate the prompt response!. this capability appears to be Exchange Server only. I failed to find anything guides on Exclusive Access for Exchange Online mailboxes.
It's available in Exchange Online as well, they haven't bothered to create a separate article.