Outlook/EXO + distribution groups

%3CLINGO-SUB%20id%3D%22lingo-sub-1877543%22%20slang%3D%22en-US%22%3EOutlook%2FEXO%20%2B%20distribution%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1877543%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3Eone%20of%20my%20users%20has%20issues%20with%20%22Distribution%20Groups%22%20in%20Outlook.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDescription%20of%20error%3A%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%22changes%20to%20the%20public%20group%20membership%20cannot%20be%20saved.%20you%20do%20not%20have%20sufficient%20permissions%20to%20perform%20this%20operation%20on%20this%20object%22%20(see%20attached%20picture)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EShort%20summary%3A%3C%2FP%3E%3CP%3E1.)%20user%20who%20wants%20to%20modify%20DL%20is%20an%20on-prem%20user%20synced%20to%20the%20cloud%3B%3C%2FP%3E%3CP%3E2.)%20DL%20she%20is%20trying%20to%20modify%20is%20cloud-only%3B%3C%2FP%3E%3CP%3E3.)%20she%20is%20the%20owner%20of%20the%20DL%20she%20is%20trying%20to%20modify%3B%3C%2FP%3E%3CP%3E4.)%20the%20user%20is%20having%20Outlook%202016%20with%20an%20E3%20license%20on%20her%20laptop.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EQuestions%20I've%20asked%20to%20the%20user%3A%3C%2FP%3E%3CP%3E%3CEM%3E%3CU%3EMy%20questions%20to%20the%20user%20over%20Teams%3A%3C%2FU%3E%3C%2FEM%3E%3CBR%20%2F%3E1.)%20Is%20this%20the%201st%20time%20this%20kind%20of%20issue%20happened%20to%20you%3F%3CBR%20%2F%3E2.)%20when%20did%20the%20issue%20start%20to%20happen%3F%3CBR%20%2F%3E3.)%20is%20issue%20showing%20up%20only%20in%20the%20desktop%20version%20or%20owa%20also%3F%3CBR%20%2F%3E4.)%20were%20you%20able%20to%20configure%20DL%20previously%20without%20any%20issues%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHer%20answers%3A%3C%2FP%3E%3CP%3E1)%20yes%2C%20but%20I%20think%20I%20had%20a%20similar%20issue%20on%20another%20DL%20this%20week%20which%20got%20resolved%20by%20itself%3CBR%20%2F%3E%202)%20I%20did%20not%20try%20to%20remove%20any%20user%20for%20some%20weeks%20(4-6%20weeks%20maybe)%20but%20I%20was%20able%20to%20add%20someone%20about%203%20weeks%20ago.%20I%20didn't%20try%20to%20edit%20the%20DL%20since%3CBR%20%2F%3E%203)%20it%20is%20on%20the%20desktop%20version%20-%20I%20will%20try%20in%20the%20OWA%20version%3B%3CBR%20%2F%3E%204)%20I%20never%20had%20any%20issue%20and%20I've%20been%20the%20owner%20of%20that%20dl%20for%20years%20now!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESome%20of%20my%20tests%3A%3C%2FP%3E%3CP%3E1.)%20I've%20added%20myself%20as%20the%20owner%20of%20DL%3A%3C%2FP%3E%3CP%3Eresult%3A%20users%20who%20reported%20issue%20%26amp%3B%20I%20are%20able%20to%20modify%20(add%2Fremove)%20DL%20from%20Outlook%20on%20the%20web.%3C%2FP%3E%3CP%3EFor%20the%20Outlook%20desktop%20version%2C%20the%20issue%20is%20still%20showing%20for%20both%20of%20us.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2.)%20added%20me%20through%20%22EXO%20admin%20center%20-%26gt%3B%20admin%20roles%20(one%20of%20the%20roles%20is%20Distribution%20Group%20role)%20-%26gt%3B%20issue%20still%20shows%20in%20Outlook%20(desktop)%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E3.)%20followed%20article%2C%20potential%20causes%2Fsolutions%20on%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foutlook%2Ftroubleshoot%2Fcontacts%2Fcannot-manage-distribution-group-exchange-mailbox%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foutlook%2Ftroubleshoot%2Fcontacts%2Fcannot-manage-distribution-group-exchange-mailbox%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECase%204%3A%20PS%20Cmdlet%20hasn't%20shown%20any%20issues%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20questions%3A%3C%2FP%3E%3CP%3E1.)%20what%20is%20the%20potential%20cause%20of%20this%20issue%3F%3C%2FP%3E%3CP%3E2.)%20what%20else%20should%20I%20check%20in%20this%20case%3F%3C%2FP%3E%3CP%3E3.)%20what%20is%20the%20solution%3F%20I%20mean%20it%20works%20in%20OWA%2C%20but%20not%20in%20the%20desktop%20version.%3C%2FP%3E%3CP%3EI%20want%20to%20know%20why.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3EDino%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1877543%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1879393%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%2FEXO%20%2B%20distribution%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1879393%22%20slang%3D%22en-US%22%3E%3CP%3EThat's%20a%20very%20well%20known%20issue%2C%20and%20you've%20already%20found%20the%20solution%20-%20use%20OWA%20to%20make%20changes%20to%20DG%20memebership.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1884186%22%20slang%3D%22en-US%22%3ERe%3A%20Outlook%2FEXO%20%2B%20distribution%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1884186%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3Etnx%20for%20the%20reply.%3CBR%20%2F%3Ecan%20you%20elaborate%20on%20your%20answer%3F%20maybe%20some%20links%20to%20articles%3F%20I%20know%20the%20user%20will%20demand%20it%20%3AD%3C%2Fimg%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi all,

one of my users has issues with "Distribution Groups" in Outlook.

 

Description of error:

 

"changes to the public group membership cannot be saved. you do not have sufficient permissions to perform this operation on this object" (see attached picture)

 

Short summary:

1.) user who wants to modify DL is an on-prem user synced to the cloud;

2.) DL she is trying to modify is cloud-only;

3.) she is the owner of the DL she is trying to modify;

4.) the user is having Outlook 2016 with an E3 license on her laptop.

 

Questions I've asked to the user:

My questions to the user over Teams:
1.) Is this the 1st time this kind of issue happened to you?
2.) when did the issue start to happen?
3.) is issue showing up only in the desktop version or owa also?
4.) were you able to configure DL previously without any issues?

 

Her answers:

1) yes, but I think I had a similar issue on another DL this week which got resolved by itself
​2) I did not try to remove any user for some weeks (4-6 weeks maybe) but I was able to add someone about 3 weeks ago. I didn't try to edit the DL since
​3) it is on the desktop version - I will try in the OWA version;
​4) I never had any issue and I've been the owner of that dl for years now!

 

Some of my tests:

1.) I've added myself as the owner of DL:

result: users who reported issue & I are able to modify (add/remove) DL from Outlook on the web.

For the Outlook desktop version, the issue is still showing for both of us.

 

2.) added me through "EXO admin center -> admin roles (one of the roles is Distribution Group role) -> issue still shows in Outlook (desktop);

 

3.) followed article, potential causes/solutions on https://docs.microsoft.com/en-us/outlook/troubleshoot/contacts/cannot-manage-distribution-group-exch...

 

Case 4: PS Cmdlet hasn't shown any issues

 

My questions:

1.) what is the potential cause of this issue?

2.) what else should I check in this case?

3.) what is the solution? I mean it works in OWA, but not in the desktop version.

I want to know why.

 

Kind regards,

Dino

3 Replies
Highlighted

That's a very well known issue, and you've already found the solution - use OWA to make changes to DG memebership.

Highlighted
Hi,
tnx for the reply.
can you elaborate on your answer? maybe some links to articles? I know the user will demand it :D
Highlighted
I wasn't aware that this is a known issue either. The known behavior I know if is when the Distribution Group is synced from on-premises and in that case you can't make changes to memberships through any client, including OWA.

Going to do some testing and researching on this one, because I've had the understanding that if your users want to be able to manage group memberships through Outlook/OWA in EXO, the groups need to be authored in the cloud. There are scripts in TechNet Gallery for deleting all on-premises DG's and recreating them in the cloud, for this reason solely.

But if it only half works I'll stop ever recommending to move the groups to the cloud (i.e. recreate in cloud).