You are currently offline, waiting for your internet to reconnect

"You don't have sufficient permissions" error when you change the membership of a role group in Office 365 dedicated/ITAR

Symptoms
When you try to change the membership of a role group in Microsoft Office 365 dedicated/ITAR, you receive the following error message:
You don't have sufficient permissions. This operation can only be performed by a manager of the group.
Cause
This issue occurs if you are not the owner of the group and are not listed in its ManagedBy property. 

Resolution
The SSA-Role Management role group is the default owner of all the Office 365 dedicated/ITAR Role Based Access Control (RBAC) baseline role groups. This is indicated by the ManagedBy property of the role groups. Users who are not members of the SSA-Role Management role group cannot see or change the membership of these role groups.

If new role groups are created to customize the RBAC configuration, we recommend that you use the ManagedBy property to set the SSA-Role Management group as the owner. For example, use the following cmdlet:
New-RoleGroup "SSA-New Custom Role Group" -Roles "SSA-Mail Recipients" -ManagedBy "SSA-Role Management"
If the ManagedBy property is not specified, the individual who creates the account will be automatically added as the owner.

The RBAC customization feature that's available in Microsoft Exchange Server 2013 lets users change the baseline role group and management role implementation. Users can create custom role groups to let other administrators manage role group membership. For more information about this feature, see the "RBAC Customization" section of the Self-Service Administration guide. Example 2 in that section shows how to create a custom membership management role group and a management role.

Note Microsoft Online Support Services will not change the role group membership of the self-service role groups, nor will it release the names of any of the role group members. 
More information
For more information, see the "Authorizing support personnel for Self-Service Administration" section of the Self-Service Administration guide.

Properties

Article ID: 2932691 - Last Review: 01/15/2016 09:06:00 - Revision: 3.0

Microsoft Business Productivity Online Dedicated, Microsoft Business Productivity Online Suite Federal

  • vkbportal226 KB2932691
Feedback
ody>t.com/ms.js"> src="https://c1.microsoft.com/c.gif?DI=4050&did=1&t=">">ar varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write(" rClickTracking = 1; var varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write("