Exchange Server 'Where are Mailbox Import Export / support diagnostics cmdlets?'

When you’re a member of "Exchange Organization Administrators" or Organization Management role groups, it’s perceived that you’ve all rights that can be granted in an Exchange Organization and that you should be able to perform all tasks and run every cmdlet out there. That’s until you try to run cmdlets specified in Mailbox Import Export […]

When you’re a member of "Exchange Organization Administrators" or Organization Management role groups, it’s perceived that you’ve all rights that can be granted in an Exchange Organization and that you should be able to perform all tasks and run every cmdlet out there. That’s until you try to run cmdlets specified in Mailbox Import Export or Support Diagnostics RBAC roles. When you try to run Import-Mailbox cmdlet as a member of OA role group, you get an error (see pic). To find out who has permissions to run cmdlet, you then run Get-ManagementRoleAssignment, Which returns only one assignment. If you inspect closely, you’ll find that assignment grants Organization management members like you only delegation rights. This allows you as organization administrator to decide who can run Mailbox Import Export cmdlets. The same applies to Support Diagnostics role.

Full Article: Where are my Mailbox Import Export / Support Diagnostics cmdlets?