You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

Note:
You can only create explicit assignment policies using the Exchange Control Panel (ECP). If you want to create a new default assignment policy, you must use the Exchange Management Shell. For more information, see the "Use the Shell to create a default assignment policy" section later in this topic.

1. In the EMC, navigate to Toolbox in the console tree.
   
   
2. In the work pane, double-click Role Based Access Control (RBAC) User Editor to open the user editor in the Exchange Control Panel (ECP).
   
   
3. Provide credentials in the Domain\user name and Password fields for an account that has the permissions needed to open the user editor in the ECP. Click Sign in.
   
   
4. Click the User Roles tab.
   
   
5. Click New under Role Assignment Policies.
   
   
6. In the Name field, enter the name of the new assignment policy.
   
   
7. In the Description field, provide a short description of the purpose for the assignment policy.
   
   
8. Select the check box next to the role or roles you want to add to the assignment policy. You can select multiple roles, including end-user roles you've added. If you select a role that has child roles, the child roles are automatically selected.
   
   
9. Click Save to save the changes to the assignment policy.
   
   

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

To create an explicit assignment policy that can be manually assigned to mailboxes, use the following syntax.

	Copy Code
New-RoleAssignmentPolicy <assignment policy name> -Roles <roles to assign>

This example creates the explicit assignment policy Limited Mailbox Configuration and assigns the MyBaseOptions, MyAddressInformation, and MyDisplayName roles to it.

	Copy Code
New-RoleAssignmentPolicy "Limited Mailbox Configuration" -Roles MyBaseOptions, MyAddressInformation, MyDisplayName

For detailed syntax and parameter information, see New-RoleAssignmentPolicy.

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

To create a default assignment policy assigned to new mailboxes, use the following syntax.

	Copy Code
New-RoleAssignmentPolicy <assignment policy name> -Roles <roles to assign> -IsDefault

This example creates the default assignment policy Limited Mailbox Configuration and assigns the MyBaseOptions, MyAddressInformation, and MyDisplayName roles to it.

	Copy Code
New-RoleAssignmentPolicy "Limited Mailbox Configuration" -Roles MyBaseOptions, MyAddressInformation, MyDisplayName -IsDefault

For detailed syntax and parameter information, see New-RoleAssignmentPolicy.

After you create a new assignment policy, you may also want to:

• Change the Assignment Policy on a Mailbox
  
  
• Add a Role to an Assignment Policy
  
  
• Remove a Role from an Assignment Policy
  
  
• View a List of Assignment Policies
  
  
• Change the Default Assignment Policy