E14 Ticket: RBAC delgate permission (database/ recipient management) to child domain

問題定義 :

1. RBAC delgate permission (database/ recipient management) to child domain

服務範圍 :

1. Provide how to setup RBAC delegate permission (database/ recipient management) to child domain

原因說明 :

解決方式 :

Symptom

=====

RBAC delegation permission (database/ recipient management) to child domain

Resolution

==============

Commands

1.            New-ManagementScope -Name "ServerInContoso" -ServerList  EX1, EX2, EX3

2.            New-ManagementScope -name "RecipientInContoso" -RecipientRoot "Contoso.msft.corp" -RecipientRestrictionFilter {name -like '*'} –verbos

3.            $RoleGroup = Get-RoleGroup "Server Management"

4.            New-RoleGroup "Server Management - Contoso" -Roles $RoleGroup.Roles

5.            $RoleGroup = Get-RoleGroup "Recipient Management"

6.            New-RoleGroup "Recipient Management - Contoso" -Roles $RoleGroup.Roles

7.            We open the ECP and under Role & AuditingàAdministrator RolesàRole Groups

8.            Brows the “Server Management – Contoso” - select the Details Tab

9.            Under Write Scope Selected the Management Scope “ServerInContoso” that we have created.

10.          Brows the “Recipient Management – Contoso” Select the Details Tab

11.          Under Write Scope selected the Management Scope “ RecipientInContoso”

12.          Add member in these group. (Child Admin user name)

13.          Save the Changes we made.