Microsoft Exchange Server 2010 uses Role-Based Access Control (RBAC) to assign Exchange Impersonation to accounts. You can provide Exchange Impersonation to the Messaging service account for all users in the organization or a specific group of users by creating a Management Scope with a specific Recipient Restrictions Filter.
Note To complete the permission assignments, use an account with Domain Administrator credentials or other credentials with the permission to create and assign Roles and Scopes, administrative credentials for the computers on which you have installed the Exchange 2010 Client Access Server roles, and Remote PowerShell installed on the computer used to run the commands.
Procedure
- Open Exchange Management Shell.
- Use the New-ManagementRoleAsignment cmdlet to assign ms-Exch-EPI-Impersonation permission for user accounts, which assigns Exchange Impersonation permission for all users to the Service Account. Replace AuraMsgSvcAcctSiteA in the following cmdlet with your Messaging Service Account: New-ManagementRoleAssignment -Name:"Avaya Impersonation Role" -Role:ApplicationImpersonation -User:AuraMsgSvcAcctSiteA
For more information, see the Microsoft Exchange Server website.