Hi,

I currently have a setup with approximately 10,000 user accounts split into multiple OUs by department such as Finance,  Education, etc. Currently, we have just one postmaster who has been assigned to manage all the recipients via ECP. What I would like to achieve is to segregate the management of recipients such that the postmaster assigned in the Finance department will ONLY SEE the recipients falling under that OU and NOT recipients falling under the Education OU.

By RBAC permissions I have only managed to limit the Finance postmaster to view the recipients under Education OU as read only. Is it possible to achieve this?  Thanks in advance for replies.

Regards,

Khaleel

Try this: http://theucguy.net/scoping-rbac-role-group-to-multiple-organizational-

Hi,

RBAC has two primary ways of assigning permissions to users in your organization, depending on whether the user is an administrator or specialist user, or an end-user: management role groups and management role assignment policies.

However, there's no relevant built-in role to achieve your expectation. We need create a customer role, for your reference: https://technet.microsoft.com/en-us/library/dd298116(v=exchg.150).aspx#CustomRoles

Moreover, here's an similar thread about RBAC, please refer to:
http://blogs.technet.com/b/ilvancri/archive/2011/06/22/exchange-2010-can-you-scope-permissions-to-more-than-one-ou.aspx
http://blogs.technet.com/b/matabra/archive/2011/09/16/how-to-create-a-custom-recipient-management-group-using-exchange-2010-rbac.aspx

Hope it help.