Forum Discussion
New-ApplicationAccessPolicy
The command to check is:
(Get-ManagementRole -Cmdlet New-ApplicationAccessPolicy).Name | ForEach-Object { Get-ManagementRoleAssignment -Role $_ -Delegating:$false | Format-Table -AutoSize Role, RoleAssigneeType, RoleAssigneeName; }The output of which is:
So, to answer your question: to be able to run New-ApplicationAccessPolicy in a default environment, the account you're signing in with needs to be a member of Exchange's "Organization Management" role.
Cheers,
Lain
LainRobertson thanks for the quick response, as you suggested I ran the following commands. Now how would I know which role I require to execute the New-ApplicationAccessPolicy cmdlet. Sorry I'm new to powershell and thankyou very much for the help.
The command to check is:
(Get-ManagementRole -Cmdlet New-ApplicationAccessPolicy).Name |
ForEach-Object {
Get-ManagementRoleAssignment -Role $_ -Delegating:$false | Format-Table -AutoSize Role, RoleAssigneeType, RoleAssigneeName;
}
The output of which is:
So, to answer your question: to be able to run New-ApplicationAccessPolicy in a default environment, the account you're signing in with needs to be a member of Exchange's "Organization Management" role.
Cheers,
Lain
LainRobertson Awesome thanks a lot. Really Appreciate your assistance.