You try to remove or make a change to a distribution group by using the Exchange admin center in Exchange Online for Office 365 or in on-premises Exchange Server 2013. In this situation, you receive the following error message:
You don't have sufficient permissions. This operation can only be performed by a manager of the group.
This issue may occur if the ManagedBy
attribute of the distribution group is empty or is set up for a user who is no longer active in Exchange Online or in Exchange 2013. This issue may occur for one of the following reasons:
- You don't have sufficient permissions.
- The admin who originally created the group is no longer in the organization.
- You are assigned the "Security Group Creation and Membership" role in the Exchange admin center. However, you can't remove the group.
Customers who set up groups may later have to remove the groups even if those customers don't own the groups.
To resolve this issue, follow these steps:
- Do one of the following, as appropriate for your situation:
- Make the change that you want to the distribution group by using the appropriate Windows PowerShell cmdlet.
For example, to remove the distribution group, use the Remove-DistributionGroup cmdlet together with the BypassSecurityGroupManagerCheck parameter. Here's an example:
Note In this cmdlet and other cmdlets in the "Examples" section, the distribution group is represented by a <NameOfGroup> placeholder.
Remove-DistributionGroup <NameOfGroup> -BypassSecurityGroupManagerCheck
Here are some more examples of other Windows PowerShell cmdlets that you can use to manage distribution groups:
- To assign ownership of a group, use the Set-DistributionGroup cmdlet, as in the following example:
Set-DistributionGroup <NameOfGroup> -ManagedBy "Admin@contoso.com" -BypassSecurityGroupManagerCheck
- To add a user to a group, use the Add-DistributionGroup cmdlet, as in the following example:
Add-DistributionGroupMember -Identity <NameOfGroup> -Member firstname.lastname@example.org
- To remove a user from a group, use the Remove-DistributionGroup cmdlet, as in the following example:
Remove-DistributionGroupMember -Identity <NameOfGroup> -Member email@example.com
- To check the members list for a group, use the Get-DistributionGroupMember cmdlet, as in the following example:
Get-DistributionGroupMember -identity <NameOfGroup>|fl DisplayName,WindowsLiveID,RecipientType
To learn about managing distribution groups that are synced to Office 365 from the on-premises environment, see the following Microsoft Knowledge Base article:
Owners of an on-premises distribution group that's synced to Office 365 can't manage the distribution group in Exchange Online
Still need help? Go to the Office 365 Community
website or the Exchange TechNet Forums
Article ID: 2731947 - Last Review: October 1, 2014 - Revision: 10.0
- Microsoft Exchange Online
- Microsoft Exchange Server 2013 Enterprise
- Microsoft Exchange Server 2013 Standard
|o365e o365p o365 o365a o365m o365022013 KB2731947|