Exchange also has user roles, which determine what rights users have to their own mailboxes and make changes such as creating new shared mailboxes or distribution lists:
User roles
The default role assignment policy grants users rights to do a number of things, such as edit their own contact information and profile information, create distribution groups and modify the ones they've created, and view and edit things like their voicemail settings, their basic options, their retention policies, their custom and marketplace apps, and so on. The only right that exists which is not provided by the Default Role Assignment Policy is My ...
