Custom Role Group for "Send as" and "Full access permissions"

The Role Recipient Management is often given to Helpdesk and Support staff who need to be able to create, modify and disable recipients in Exchange 2010. One permission which this role does not grant and may be needed is the ability to modify the “Send as” attribute on recipients.

The Active Directory Permission Role allows this access and by default is part of the Role Group Organisation Management. This Role Group grants the member complete access to Exchange and it’s likely you don’t want to grant complete access to allow them to modify the “Send as” attribute.

There are 2 ways to create such a group.

1. Through the ECP page in OWA
2. In the EMC under "Tools"

First copy the "Recipient Management" role and give it a logical name for your arganisation.
Then add the "Active Directory Permission" group

 

Add the member to this newly created group.

After an hour or so you support staff will be able to grant "Send as" and "Full access" permissions to mailboxes.

 

 

Source