Microsoft Exchange Server 2013: Mailbox and High Availability

Scopes

All RBAC roles have scopes to tell Exchange which objects can be accessed and updated by holders of the role. The implicit (preset) scopes Exchange supports are:

• Recipient read scope. Determines the Active Directory recipient objects (users, groups, contacts) the holder can read. When Organization is shown in the recipient read or write scope, the holder has access to every object in the organization. The default role assignment policy for users has Self as its scope, meaning that the holder can update properties of his mailbox.

• Recipient write scope. Determines the Active Directory recipient objects the holder can update, create, or delete.

• Configuration read scope. Determines the Active Directory configuration objects (servers, databases, ...