Using permissions you can delegate Exchange server administrative tasks to other users.

Keep in mind the following facts for managing Exchange permissions:

• Permissions are assigned either at the organizational level or the administrative

group level.
• Use the Exchange Delegation Wizard in Exchange System Manager to manage
delegations.
• While running /forestprep or during the Exchange Server 2003 installation, you
identify the default Exchange System Administrator. This administrator has all
permissions to the Exchange organization.
• Exchange administrators must have specific permissions in Active Directory for
the objects and levels they will be working. They must also have permissions on
the local computer.

The following table identifies the permissions of each Exchange administrator role.

Administrator Role Administrative Rights

Full Administrator Full control over all objects within the hierarchy
Change all permissions
Delegate permissions
Read mailboxes
Administrator Full control over all objects, except cannot change permissions
View Only Administrator View configuration, Create Recipient, Mail enabled contacts.

Note: When you assign the “Full Administrator or Administrator” roles to an

administrative group, the user also receives “View Only” permissions to the organization,
allowing the administrator to view the configuration of the entire organization.