Hallo zusammen,
ich beschäftige mich grade mit Delegationsthemen und bei einem Test ist mir aufgefallen, dass ein Benutzer, der nur "View-Only Recipients" als Rolle hat, trotzdem in der Lage ist eine Verteilergruppe anzulegen.
Schaue ich mir die Entry´s an, dann finde ich nicht den Grund warum das so ist.
Code
Get-EligibleDistributionGroupForMigration {Debug, ErrorAction, ErrorVariable, Identity...}
Get-MailboxLocation {Debug, ErrorAction, ErrorVariable, Identity...}
Get-MailboxUserConfiguration {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-Recipient {Anr, BookmarkDisplayName, Credential, Database...}
Get-SweepRule {Debug, DomainController, ErrorAction, ErrorVariable...}
Validate-MailFlowThroughFrontDoor {Confirm, DestinationEndpoint, ErrorAction, ErrorVariable...}
Get-Mailbox {Anr, Arbitration, Archive, AuditLog...}
Get-MoveRequestStatistics {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-PublicFolderMailboxMigrationRequestStatistics {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-PublicFolderMigrationRequestStatistics {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-PublicFolderMoveRequestStatistics {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-User {Anr, Arbitration, AuditLog, AuxAuditLog...}
Start-AuditAssistant {BacklogAssistant, ExpectedFoldersCount, FolderTimeRangeSpecifierUTC, Identity}
Set-UnifiedAuditSetting {AlternativeTenantId, Debug, ErrorAction, ErrorVariable...}
Set-ADServerSettings {ConfigurationDomainController, Confirm, Debug, ErrorAction...}
Search-MessageTrackingReport {BypassDelegateChecking, Confirm, Debug, DomainController...}
Get-UserPhoto {Anr, Credential, Debug, DomainController...}
Get-UnifiedAuditSetting {Debug, ErrorAction, ErrorVariable, Identity...}
Get-UMMailboxPIN {Credential, Debug, DomainController, ErrorAction...}
Get-UMMailbox {Anr, Credential, Debug, DomainController...}
Get-UMCallDataRecord {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-UMCallAnsweringRule {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-SecurityPrincipal {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-ResourceConfig {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-RemoteMailbox {Anr, Credential, Debug, DomainController...}
Get-PublicFolderStatistics {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-PublicFolderMoveRequest {BatchName, Debug, DomainController, ErrorAction...}
Get-PublicFolderMigrationRequest {BatchName, Debug, DomainController, ErrorAction...}
Get-PublicFolderMailboxMigrationRequest {BatchName, Debug, DomainController, ErrorAction...}
Get-PublicFolderMailboxDiagnostics {Confirm, Debug, DomainController, ErrorAction...}
Get-PublicFolderItemStatistics {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-PublicFolderClientPermission {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-PublicFolder {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-OrganizationalUnit {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-OnlineMeetingConfiguration {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MoveRequest {BatchName, Credential, Debug, DomainController...}
Get-MobileDeviceStatistics {ActiveSync, Debug, DomainController, ErrorAction...}
Get-MobileDeviceMailboxPolicy {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MobileDevice {ActiveSync, Debug, DomainController, ErrorAction...}
Get-MigrationUserStatistics {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-MigrationUser {BatchId, Debug, DomainController, ErrorAction...}
Get-MigrationStatistics {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-MigrationEndpoint {BatchStatus, Confirm, ConnectionSettings, Debug...}
Get-MigrationConfig {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MigrationBatch {Debug, Diagnostic, DiagnosticArgument, DomainController...}
Get-MessageTrackingReport {BypassDelegateChecking, Debug, DetailLevel, DomainController...}
Get-MessageTrackingLog {Debug, DomainController, End, ErrorAction...}
Get-MailboxStatistics {Archive, CopyOnServer, Database, Debug...}
Get-MailboxSpellingConfiguration {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MailboxRegionalConfiguration {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MailboxPreferredLocation {Identity}
Get-MailboxPermission {Credential, Debug, DomainController, ErrorAction...}
Get-MailboxMessageConfiguration {Credential, Debug, DomainController, ErrorAction...}
Get-MailboxJunkEmailConfiguration {Credential, Debug, DomainController, ErrorAction...}
Get-MailboxFolderStatistics {Archive, AuditLog, Debug, DomainController...}
Get-MailboxFolderPermission {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MailboxCalendarFolder {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MailboxCalendarConfiguration {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-MailboxAutoReplyConfiguration {Credential, Debug, DomainController, ErrorAction...}
Get-MailUser {Anr, Credential, Debug, DomainController...}
Get-MailPublicFolder {Anr, Credential, Debug, DomainController...}
Get-MailContact {Anr, Credential, Debug, DomainController...}
Get-LogonStatistics {Database, Debug, DomainController, ErrorAction...}
Get-InboxRule {Debug, DescriptionTimeFormat, DescriptionTimeZone, DomainController...}
Get-HybridConfiguration {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-Group {Anr, Credential, Debug, DomainController...}
Get-DynamicDistributionGroup {Anr, Credential, Debug, DomainController...}
Get-DomainController {Credential, Debug, DomainName, ErrorAction...}
Get-DistributionGroupMember {Credential, Debug, DomainController, ErrorAction...}
Get-DistributionGroup {Anr, Credential, Debug, DomainController...}
Get-Contact {Anr, Credential, Debug, DomainController...}
Get-CalendarProcessing {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-CalendarNotification {Credential, Debug, DomainController, ErrorAction...}
Get-CalendarDiagnosticLog {Credential, Debug, DomainController, EndDate...}
Get-CalendarDiagnosticAnalysis {CalendarLogs, Credential, Debug, DetailLevel...}
Get-CASMailbox {ActiveSyncDebugLogging, ActiveSyncSuppressReadReceipt, Anr, Credential...}
Get-AddressList {Container, Debug, DomainController, ErrorAction...}
Get-AddressBookPolicy {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-ActiveSyncMailboxPolicy {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-ActiveSyncDeviceStatistics {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-ActiveSyncDevice {Debug, DomainController, ErrorAction, ErrorVariable...}
Get-ADServerSettings {Debug, ErrorAction, ErrorVariable, OutBuffer...}
Export-MailboxDiagnosticLogs {Archive, ComponentName, Confirm, Credential...}
Enable-UMCallAnsweringRule {Confirm, Debug, DomainController, ErrorAction...}
Alles anzeigen
Würde mich freuen wenn mich einer von euch aufschlauen könnte warum das so ist.
Gruß