Give Set Command permissions via AD or RBAC?

Some users have ‘insufficient access rights’ when users run my script with a Set- command. Get commands work fine. These are AD attributes. Every user has many groups – I haven’t see one that helps. However, without Domain Admin, perhaps the user cannot modify these attributes with their AD-only permissions. Maybe I need to grant permissions through Exchange RBAC to be able to modify the AD attributes? Example: Set-ADObject for TargetAddress

submitted by /u/vencetti
[link] [comments]

Leave a Reply