The Exchange Administration Delegation Wizards allows you to define roles at the organization level, or at the administrative group level. Where you define a role, combined with the role that you grant may create "effective" permissions. Effective permissions are permissions granted as a side-effect of a granted permission. For example, when you assign a group view-only permissions at the Organization level, the group will also have view-only permissions at the Administrative Group level. Thus, the effective, or actual, permissions of the group are view-only at both the Organization and Administrative Group levels.\nMore specifically, at the administrative group level:\n
    \n\t
  • Exchange Administrator includes Exchange View Only Administrator at the organization level.
  • \n\t
  • Exchange Full Administrator includes both Exchange Administrator at the administrative group level and Exchange View Only Administrator at the organization level.
  • \n\t
  • Exchange View Only Administrator at the organizational level.
  • \n
\nAdditionally, at the organization level:\n
    \n\t
  • Exchange View Only Administrator includes Exchange View Only Administrator at the administrative group level.
  • \n\t
  • Exchange Administrator includes Exchange View Only Administrator at the organization level, which gives Exchange Administrator Exchange View Only Administrator at the administrative group level.
  • \n\t
  • Exchange Full Administrator includes all other permissions at both the organization and administrative group levels.
  • \n
\nThe following table provides a summary of the effective permissions versus the granted permissions.\n

Effective permissions versus granted permissions

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Granted PermissionsAG: ViewAG: AdminAG: Full AdminORG: ViewORG: AdminORG: Full Admin
AG: Exchange View Only AdministratorYesNoneNoneYesNoneNone
AG: Exchange AdministratorYesYes*NoneYesNoneNone
AG: Exchange Full AdministratorYesYes*Yes*YesNoneNone
ORG: Exchange View Only AdministratorYesNoneNoneYesNoneNone
ORG: Exchange AdministratorYesYesNoneYesYesNone
ORG: Exchange Full AdministratorYesYesYesYesYesYes
\n* = Local administrative group only  AG = Administrative group level  ORG = Organization level