New-MigrationBatch doesn't honor RBAC management scope in Exchange Server 2019 and 2016

Applies to: Exchange Server 2019Exchange Server 2016

Symptoms


Consider the following scenario in a Microsoft Exchange Server 2019 or Exchange Server 2016 environment:
  • You create a RBAC management scope with DataBase write scope.
  • Apply the scope to a user.
  • The user runs the New-MigrationBatch PowerShell command with a database that is out of that scope in the TargetDatabases parameter.
In this scenario, the command runs successfully. 

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. 

Resolution


To fix this issue, install one of the following updates:
For Exchange Server 2019, install the Cumulative Update 1 for Exchange Server 2019 or a later cumulative update for Exchange Server 2019.
For Exchange Server 2016, install the Cumulative Update 12 for Exchange Server 2016 or a later cumulative update for Exchange Server 2016.

References


Learn about the terminology that Microsoft uses to describe software updates.