Running the Exchange 2013 CU9 EAC, when logged in as a member of Organization Management, in mailboxes, when clicking New, the "Office 365 Mailbox" option is available. When logged in as a member of Recipient Management, the option is not available. The documentation for New-RemoteMailbox links to the Permissions topic, which says that Recipient Management membership is sufficient.

Is there a fix or workaround to

Hi,

I read the permission in the following article:

https://technet.microsoft.com/en-us/library/dd638132(v=exchg.150).aspx

I noticed that the permission required for Remote mailboxes is listed with:

Organization Management

Recipient Management

What I understand is that we need both Organization Management and Recipient Management permission to manage remote mailbox. Additionally, please make sure the View-only Organization Management permission is also added for the user.

Regards,

Winnie, I don't believe that to be true, or else every recipient administration feature would require Organization Admin, since it's listed for all of them, but we know that's not the case or it makes the Recipient Management feature useless since everything it allows would also require Organization Management.  Therefore I believe you're reading that as a logical AND when it's actually a logical OR.  The document backs me up:  "You must be assigned one of those role groups..." (the emphasis is mine).

I agree with '  Ed '

Hi Ed,

Sorry for delay. I do some research about your issue and found that you're right. We can use either Organization Management and Recipient Management permission to run New-RemoteMailbox cmdlet.

About the "Office 365 Mailbox" option in EAC, please assign View-Only Recipients role to Recipient Management to have a try. I noticed that if we want to view some recipients in EAC, we need to have more permission than EMS (personal opinion in my testing in Exchange 2013).

I noticed that the Organization Management has been assigned with View-Only Recipients role while the Recipient Management is not. Please try to assign this permission to have a try.

Hope it works.

Regards,