You are currently offline, waiting for your internet to reconnect

Office 365 admin can't access the Exchange Control Panel of an Exchange Online user

PROBLEM
An Office 365 administrator can't access the Exchange Control Panel of a Microsoft Exchange Online user. When the administrator clicks Manage My Organization in the Exchange Control Panel, and then clicks Another User, he or she receives the following error message:
Sorry! Access Denied – You do not have permission to open this page. If you are a new user or were recently assigned credentials, please wait 15 minutes and try again
CAUSE
This issue occurs if the Office 365 administrator account is assigned to the "empty" role assignment policy. In this situation, the administrator doesn't have the necessary role-based access control (RBAC) permissions to access Exchange Control Panel through Outlook Web App.
SOLUTION
To resolve this issue, follow these steps:
  1. Connect to Exchange Online by using remote PowerShell. For more information about how to do this, go to the following Microsoft website:
  2. Retrieve another role assignment policy. To do this, run the following command:
    $a= Get-RoleAssignmentPolicy -Organization contoso.com | where{$_.IsDefault -ne $true}
    Note If the organization contains no additional role assignment policies, you must create a role assignment policy before you run this command. For more information about how to do this in Exchange Online, go to the following Microsoft website:
  3. Assign the role assignment policy to a global administrator. To do this, run the following command:
    Set-Mailbox joe@contoso.com -RoleAssignmentPolicy $a.Identity
  4. Make sure that the role was assigned correctly. To do this, run the following command:
    Get-Mailbox joe@contoso.com -RoleAssignmentPolicy
Still need help? Go to the Office 365 Community website.
Properties

Article ID: 2792924 - Last Review: 07/14/2014 22:04:00 - Revision: 9.0

Microsoft Exchange Online

  • o365 o365a o365e o365p o365m o365022013 KB2792924
Feedback
=4050&did=1&t=">dy>id=1&t=">