Not able to assign new management role to User in Exchange 2013 (Network Steve Forum)

Not able to assign new management role to User in Exchange 2013

While trying to assign new management role to existing AD user using the below command, we are getting the error.

New-ManagementRoleAssignment -Role "Mailbox Search" -User "SharePointEnterprise-ApplicationAccount"

Error:-
Configuration Scope Type "OrganizationConfig" is greater than or isn't comparable with the configuration scope type "None".

Any idea?

Thanks,
Manish

April 8th, 2015 2:09pm

Hi Manish,

It is due to "None" is in the scope of "Mailbox search" role , so the scope isn't available to the "mailbox search" role.

I recommend you refer to the following tables to understand the root cause:

https://technet.microsoft.com/en-us/library/dd335146%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

Implicit scopes

Description

OrganizationConfig

If OrganizationConfig is present in the role's configuration write scope, the role can create or modify any server or database configuration object across the Exchange organization.

If OrganizationConfig is present in the role's configuration read scope, the role can view any server or database configuration object across the Exchange organization.

This scope is used only with configuration read and write scopes.

None

If None is in a scope, that scope isn't available to the role. For example, a role that has None in the recipient write scope can't modify recipient objects in the Exchange organization.

Management role	Recipient read scope	Recipient write scope	Configuration read scope	Configuration write scope
Mailbox Search	Organization	Organization	None	None

Best regards,

Free Windows Admin Tool Kit Click here and download it now

April 8th, 2015 11:39pm

Thanks Niko.

Can you please suggest how to change the scope of "Mailbox search" role.

Thanks,

Manish

April 9th, 2015 12:21am

This topic is archived. No further replies will be accepted.