You need to create an exclusion for two helpdesk RBAC (Role Based Access Control) groups to not
have access to managers.
You will need to pick 3 powershell commands from the available choices
A.
New-ManagementRole, New-ManagementScope,Set-ManagementScope (Guessed)
B.
New-ManagementScope, RecipientRestrictionFilter ,New-ManagementRoleAssignment (Guessed)
C.
New-ManagementScope, New-ManagementRoleAssignment, CustomRecipientWriteScope
(Guessed)
D.
Unsure of commands and correct answer
Anyone know if this is right and why?
0
0
I will vote for B!
http://tctblgs.azurewebsites.net/limiting-access-to-executive-mailboxes-in-exchange-online/
0
0
B or C
RecipientRestrictionFilter is used in New-ManagementScope
CustomRecipientWriteScope is used in New-ManagementRoleAssignment
New-ManagementScope -Name “Executive Mailboxes” -RecipientRoot “contoso.com/Executives” -RecipientRestrictionFilter {RecipientType -eq “UserMailbox”}
https://technet.microsoft.com/en-us/library/dd335137(v=exchg.160).aspx
New-ManagementRoleAssignment -Role “Distribution Groups” -SecurityGroup “North America Exec Assistants” -CustomRecipientWriteScope “North America Recipients”
https://technet.microsoft.com/en-us/library/dd335193(v=exchg.160).aspx
Need to specify the scope first, than assign it.
I guess correct answer is B, but C sounds good too…
0
0