E14 Ticket: RBAC for Customize Role for Send Connector

 

 

1. Create a role from parent role
   
   [PS] C:\>New-ManagementRole -Name "BQC-Send Connectors" -Parent "Send Connectors"

Name RoleType
---- --------
BQC-Send Connectors SendConnectors





2. 
   [PS] C:\>Get-ManagementRole "BQC-Send Connectors" | fl
   
   

   RunspaceId : c28c8c78-5d9b-4140-9d8e-7983a2c3e5cf RoleEntries : {(Microsoft.Exchange.Management.PowerShell.E2010) Get-DomainController -Credential -Debug -DomainName -ErrorAction -ErrorVariable -Forest -GlobalCatalog -OutBuffer -OutVariable - Verbose -WarningAction -WarningVariable, (Microsoft.Exchange.Management.PowerShell.E2010) Get-ExchangeServer -Debug -Domain -DomainController -ErrorAction -ErrorVariable -Identit y -OutBuffer -OutVariable -Status -Verbose -WarningAction -WarningVariable, (Microsoft.Ex change.Management.PowerShell.E2010) Get-ReceiveConnector -Debug -DomainController -ErrorA ction -ErrorVariable -Identity -OutBuffer -OutVariable -Server -Verbose -WarningAction -W arningVariable, (Microsoft.Exchange.Management.PowerShell.E2010) Get-SendConnector -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable, (Microsoft.Exchange.Management.PowerShell.E2010) Get-Tr ansportServer -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer - OutVariable -Verbose -WarningAction -WarningVariable, (Microsoft.Exchange.Management.Powe rShell.E2010) Remove-SendConnector -Confirm -Debug -DomainController -ErrorAction -ErrorV ariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatI f, (Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Verbose -W arningAction -WarningVariable -WhatIf, (Microsoft.Exchange.Management.PowerShell.E2010) S et-SendConnector -AddressSpaces -AuthenticationCredential -Comment -Confirm -ConnectionIn activityTimeOut -Debug -DNSRoutingEnabled -DomainController -DomainSecureEnabled -Enabled -ErrorAction -ErrorPolicies -ErrorVariable -Force -ForceHELO -Fqdn -Identity -IgnoreSTAR TTLS -IsCoexistenceConnector -IsScopedConnector -LinkedReceiveConnector -MaxMessageSize - Name -OutBuffer -OutVariable -Port -ProtocolLoggingLevel -RequireOorg -RequireTLS -SmartH ostAuthMechanism -SmartHosts -SmtpMaxMessagesPerConnection -SourceIPAddress -SourceTransp ortServers -TlsAuthLevel -TlsDomain -UseExternalDNSServersEnabled -Verbose -WarningAction -WarningVariable -WhatIf, (Microsoft.Exchange.Management.PowerShell.E2010) New-SendConne ctor -AddressSpaces -AuthenticationCredential -Comment -Confirm -ConnectionInactivityTime Out -Custom -Debug -DNSRoutingEnabled -DomainController -DomainSecureEnabled -Enabled -Er rorAction -ErrorPolicies -ErrorVariable -Force -ForceHELO -Fqdn -IgnoreSTARTTLS -Internal -Internet -IsCoexistenceConnector -IsScopedConnector -LinkedReceiveConnector -MaxMessage Size -Name -OutBuffer -OutVariable -Partner -Port -ProtocolLoggingLevel -RequireOorg -Req uireTLS -SmartHostAuthMechanism -SmartHosts -SmtpMaxMessagesPerConnection -SourceIPAddres s -SourceTransportServers -TlsAuthLevel -TlsDomain -Usage -UseExternalDNSServersEnabled - Verbose -WarningAction -WarningVariable -WhatIf} RoleType : SendConnectors ImplicitRecipientReadScope : Organization ImplicitRecipientWriteScope : Organization ImplicitConfigReadScope : OrganizationConfig ImplicitConfigWriteScope : OrganizationConfig IsRootRole : False IsEndUserRole : False MailboxPlanIndex : Description : IsDeprecated : False AdminDisplayName : ExchangeVersion : 0.12 (14.0.451.0) Name : BQC-Send Connectors DistinguishedName : CN=BQC-Send Connectors,CN=Send Connectors,CN=Roles,CN=RBAC,CN=MSFT,CN=Microsoft Exchange, CN=Services,CN=Configuration,DC=corp,DC=com Identity : BQC-Send Connectors Guid : d7f1d5bf-e01e-43f0-baba-9885db6aa0c9 ObjectCategory : corp.com/Configuration/Schema/ms-Exch-Role ObjectClass : {top, msExchRole} WhenChanged : 1/31/2013 10:32:59 AM WhenCreated : 1/31/2013 10:32:59 AM WhenChangedUTC : 1/31/2013 2:32:59 AM WhenCreatedUTC : 1/31/2013 2:32:59 AM OrganizationId : OriginatingServer : BQTDC03.MSFT.corp.com IsValid : True

   
   
3. 
   [PS] C:\>Get-ManagementRoleEntry "BQC-Send Connectors\*"
   
   
   
   
4. 
   [PS] C:\>Get-ManagementRoleEntry "BQC-Send Connectors\*" | where {($_.Name -like "Remove-SendConnector")}
   
   
   

[PS] C:\>Get-ManagementRoleEntry "BQC-Send Connectors\*" | where {($_.Name -like "Remove-SendConnector")} | Remove-ManagementRoleEntry



 

6. Get-ManagementRoleEntry “BQC-Send Connectors\*”
   
   
   
   
7. 
   [PS] C:\Windows\system32>New-SendConnector -Name "BQC to Internet" -Verbose -Debug -SourceTransportServers "BQC-HUB01","BQC-HUB02" -AddressSpaces * -Internet
   
   
   
   
8. Remove-SendConnector
   
   [PS] C:\Windows\system32>Get-SendConnector -Identity "BQC to Internet" -DomainController rdc01.corp.com

Identity                                AddressSpaces                           Enabled
--------                                -------------                           -------
BQC to Internet                         {smtp:*;1}                              True


[PS] C:\Windows\system32>Get-SendConnector -Identity "BQC to Internet" -DomainController rdc01.corp.com | Remove-SendConnector

Confirm
Are you sure you want to perform this action?
Removing Send connector "BQC to Internet".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y