Jul 06 2021
10:01 AM
- last edited on
Jan 14 2022
03:54 PM
by
TechCommunityAP
Jul 06 2021
10:01 AM
- last edited on
Jan 14 2022
03:54 PM
by
TechCommunityAP
I'm trying to limit the level of access that our admins have to all admin centers. Before, they were Exchange Administrators, I moved them to Exchange Recipient Administrators however that doesn't allow them to edit distribution groups in the main admin center, I added them to Groups admins but that doesn't allow them to edit DLs either. I created a custom role in O365 but that only allow them to go to the Exchange admin center to edit distribution groups, they can't do it from the main admin center. I see in Azure AD the option to create a custom role but all I see is permissions for groups and I don't know if that would allow them to manage distribution groups as well. So my question is, how do I allow my admins to manage distribution groups from the main admin center and also from Exchange?
Jul 06 2021 01:14 PM
Jul 06 2021 01:25 PM
@pvanberlo Yes, as Exchange Administrators they are able to edit distribution groups, and much more. Exchange admins was their role before, I removed them because they can do much more than they actually need like messing with the mail flow, retention policies, exchange admin roles, etc. I thought that Exchange Recipients Administrators (recently released role) would be good but it turns out it doesn't work for distribution lists.
Jul 06 2021 01:28 PM