Hi All, I am testing Exchange 2010 role based access control. I want to create a "Role Assignment Policy" under User Roles. which will allow users to update their information under "MyAddressInformation" But restricts user to edit or update their FAX Number (which is part of MyAddressInformation). User can update or change any field Like street address and work telephone, But User should not be able to change or update their FAX Number. Is there a way to accomplish this in Exchange 2010?

“MyAddressInformation” is the built-in role that is read-only, please make a custom management role, a copy of the “MyAddressInformation” role Then, you can remove (By using Set-ManagementRoleEntry) the “Fax” and “OtherFax” parameter from that copy, and attach the custom management role into the policyJames Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

Thanks James.... Can You explain how can I accomplish this? Could you please share the Exact powershell command to do this? I being trying this but wasn't able to remove Fax parameter from it.

Create a custom role based on Myaddressinformation New-ManagementRole –Name Myaddress –parent Myaddressinformation Delete the fax parameter Set-ManagementRoleEntry “Myaddress\Set-user” –Parameters fax –RemoveParameter Create a new policy New-RoleAssignmentPolilcy –Name Policy1 –Roles mybaseoptions,myadderss,myPersonalInformation,myMobileinformation Apply the policy to user Set-mailbox “user” –RoleAssignmentPolicy policy1James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

Thanks James.... It is working for me.... Appreciate Your quick and great help...