Consider the following scenario:
- You create a management role assignment in a Microsoft Exchange Server 2010 environment.
- You assign the Mail Recipients role to a role assignee.
- You define the scope of the role assignment to an organizational unit.
- The role assignee tries to change mailbox properties that are outside the management role group scope by using the Set-CalendarProcessing cmdlet.
This issue occurs because there is no Role Based Access Control (RBAC) scope verification when Exchange Server 2010 run the Set-CalendarProcessing cmdlet.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about Role Based Access Control, visit the following Microsoft website:Set-CalendarProcessing cmdlet, visit the following Microsoft website:Mail Recipients role, visit the following Microsoft website:
Article ID: 2489130 - Last Review: Jul 28, 2011 - Revision: 1