I did 🙂 I was looking for the new cool commandlets like new-mailboximportrequest and new-mailboxexportrequest which came available in Exchange 2010SP1. So I logged a call with Microsoft Technical Support and it was fixed in a bit since it was as design.
Exchange 2010 uses a role based access control permissions model. Whether you can perform a task is dependant on if you have access to a commandlet and/or one or more of its parameters. You can learn more about RBAC here – http://technet.microsoft.com/en-us/library/dd298183(EXCHG.140).aspx.
There are some roles that are more protected because they allow admins to view sensitive user data, assign very broad permissions or configure advanced settings that shouldn’t normally be changed.
You can see which roles aren’t assigned to the Organization Management role group by viewing the table in this topic – http://technet.microsoft.com/en-us/library/dd335087(EXCHG.140).aspx. Any role that is only a delegating assignment but isn’t a regular assignment indicates the role must be manually assigned to the Organization Management role group before a member of that role group can perform the associated tasks.
You need to add the Import Export Mailbox role to a role group to see the import-mailbox and export-mailbox commandlet. http://technet.microsoft.com/en-us/library/ee633452(EXCHG.140).aspx.
Thanks to Microsoft Technical Support for pointing out the documentation, it was hidden well 😉
When you want to add the right to import or export mailboxes to forinstance to the group “Organization Management” you can use the following commandline:
New-ManagementRoleAssignment -Name “Import Export_Organization Management” -SecurityGroup “Organization Management” -Role “Mailbox Import Export”
Thanks, I was looking for this, very useful!