Office 365 admin can't access the Exchange Control Panel of an Exchange Online user

Article translations Article translations
Article ID: 2792924 - View products that this article applies to.
Not sure what release of Office 365 you're using? Go to the following Microsoft website:
Am I using Office 365 after the service upgrade?
Expand all | Collapse all

PROBLEM

An Office 365 administrator can't access the Exchange Control Panel of a Microsoft Exchange Online user. When the administrator clicks Manage My Organization in the Exchange Control Panel, and then clicks Another User, he or she receives the following error message:
Sorry! Access Denied – You do not have permission to open this page. If you are a new user or were recently assigned credentials, please wait 15 minutes and try again

CAUSE

This issue occurs if the Office 365 administrator account is assigned to the "empty" role assignment policy. In this situation, the administrator doesn't have the necessary role-based access control (RBAC) permissions to access Exchange Control Panel through Outlook Web App.

SOLUTION

To resolve this issue, follow these steps:
  1. Connect to Exchange Online by using remote PowerShell. For more information about how to do this, go to the following Microsoft website:
    Connect to Exchange Online Using Remote PowerShell
  2. Retrieve another role assignment policy. To do this, run the following command:
    $a= Get-RoleAssignmentPolicy -Organization contoso.com | where{$_.IsDefault -ne $true}
    Note If the organization contains no additional role assignment policies, you must create a role assignment policy before you run this command. For more information about how to do this in Exchange Online, go to the following Microsoft website:
    Create a new role assignment policy
  3. Assign the role assignment policy to a global administrator. To do this, run the following command:
    Set-Mailbox joe@contoso.com -RoleAssignmentPolicy $a.Identity
  4. Make sure that the role was assigned correctly. To do this, run the following command:
    Get-Mailbox joe@contoso.com -RoleAssignmentPolicy
Still need help? Go to the Office 365 Community website.

Properties

Article ID: 2792924 - Last Review: September 11, 2013 - Revision: 8.0
Applies to
  • Microsoft Office 365 for education  (pre-upgrade)
  • Microsoft Office 365 for enterprises (pre-upgrade)
  • Microsoft Office 365 for small businesses  (pre-upgrade)
  • Microsoft Exchange Online
Keywords: 
o365 o365a o365e o365p o365062011 pre-upgrade o365m o365022013 after upgrade KB2792924

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com