Need help to create a very basic 1st line Role Definition

[James_Slack]

Hi,

I have had a look at the roles and definitions, but I can't find anything that suits.

What I would like to do is have a role that the users can only enable new accouns for Vault / Exchange Mailboxes.

I would ideally not like them to be able to do anything else... if that's not possible, i would need to know exactly what else they would get, so that I can get security sign off.

Many thanks in advance.

James

[AndrewB]

if that's all you're looking to do, you dont need them to login to EV but instead, create a provisioning group mapped to an AD group and then have your support folks add users to that group via AD. the provisioning task will run at its scheduled time and automatically pick them up and enable them per the settings.

[James_Slack]

Sounds like a good idea and easy to do. Will just check to see if they have any AD rights to add users to groups.