Ever since Microsoft updated the permissions for Exchange Online, it seems like Entra ID RBAC is a thing of the past, and now we've got to deal with Exchange's own RBAC settings. I'm in a tough spot because despite being assigned both the Organization Admin and Exchange Online Admin roles, I'm completely blocked from editing SMTP or Delegation settings for any mailboxes. What's going on here?
5 Answers
Honestly, can anyone really say why Microsoft decides to switch things up? It feels like they just make changes for the sake of making changes. There's no clarity half the time, it seems.
Have you checked if your roles are Active or Eligible? Sometimes, in Azure PIM, you need to activate the roles before you can use them. That might be why you're facing issues in the Exchange Online admin portal. You might just need to give those roles a little nudge!
Yes, I’ve confirmed that they’re active.
It might help if you try using an incognito tab when signing into the Exchange Admin. I’ve had times where the portal wouldn’t recognize my elevated privileges unless I did that. Perhaps that's what's happening to you too?
Are you sure you've still got the Exchange Administrator role assigned? It’s easy to overlook that with all these changes.
Yeah, I've noticed that too! Seems like some folks there just want to shake things up to justify their positions.