New-MigrationBatch doesn't honor RBAC management scope in Exchange Server 2019 and 2016

Applies To
Exchange Server 2019 Exchange Server 2016

Symptoms

Consider the following scenario in a Microsoft Exchange Server 2019 or Exchange Server 2016 environment:

  • You create a RBAC management scope with DataBase write scope.
  • Apply the scope to a user.
  • The user runs the New-MigrationBatch PowerShell command with a database that is out of that scope in the TargetDatabases parameter.

In this scenario, the command runs successfully.

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Resolution

To fix this issue, install one of the following updates:For Exchange Server 2019, install the Cumulative Update 1 for Exchange Server 2019 or a later cumulative update  for Exchange Server 2019.

For Exchange Server 2016, install the Cumulative Update 12 for Exchange Server 2016 or a later cumulative update for Exchange Server 2016.

References

Learn about the terminology  that Microsoft uses to describe software updates.