1. On a computer that hosts the Microsoft Exchange Management Shell, open the Microsoft Exchange Management Shell.

  2. Type Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -Acce***ights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin.

  3. Type Add-RoleGroupMember "View-Only Organization Management" -Member "BESAdmin".

  4. Do one of the following:

    • To set the permissions at the organizational unit level, type Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -User "BESAdmin" -Identity "OU=,DC=,DC=,DC=" where , , and form the name of the domain.

      For example, if the organizational unit is Texas and the domain name is example.organization.net, type Texas for , example for , organization for , and net for .


    • To set the permissions at the common name level, type Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -User "BESAdmin" -Identity "CN=,DC=,DC=,DC=" where , , and form the name of the domain.

      For example, if the common name is Users and the domain name is example.organization.net, type Users for , example for ,organization for , and net for .



After you finish: If you create a new mailbox database for Microsoft Exchange, repeat step 2.