Create Exchange Online Custom Role Group

To assign the least privileges necessary for VOSS-4-UC to manage your Exchange Online mailboxes you will need to create a custom role group in Exchange Online. These steps will walk you through that process.

  1. Browse to https://portal.office.com, and sign in with administrative credentials.

  2. Navigate to the Office 365 Admin Center.

  3. Navigate to the Exchange Admin Center and choose permissions from the navigation pane.

  4. Choose the admin roles option at the top of the screen.

    Exchange Online Admin Roles page

    MS-image028

  5. Click the + icon to add a new role group.

  6. Enter a group Name and an optional Description. Leave the Write scope as Default.

  7. Click the + icon under Roles to add the following roles. Ctrl + left mouse click to select multiple roles. Click OK when complete:

    • Address Lists
    • Mail Recipient Creation
    • Mail Recipients
    • Mailbox Import Export
    • Migration
    • Move Mailboxes
    • Reset Password
    • SendMailApplication
    • UM Mailboxes

    Exchange Online Role Group - Role Selection

    MS-image029

  8. Click the + icon on the new role group sheet, under Members: to add the service account to this group.

  9. Choose the service account from the list of user accounts, click Add ->, and then click OK.

    Exchange Online Role Group - Add Members

    MS-image030

  10. Click Save on the new role group sheet.

    Exchange Online Role Group

    MS-image031