Five Active Directory UM objects are required to implement Unified Messaging:

• UM dial plans
  
  
• UM mailbox policies
  
  
• UM IP gateways
  
  
• UM hunt groups
  
  
• UM auto attendants
  
  

For more information about the UM objects, see the following topics:

• Understanding Unified Messaging Dial Plans
  
  
• Understanding Unified Messaging Mailbox Policies
  
  
• Understanding Unified Messaging IP Gateways
  
  
• Understanding Unified Messaging Hunt Groups
  
  
• Understanding Unified Messaging Auto Attendants
  
  

For more information about how to create and manage UM objects, see the following topics:

• Managing Unified Messaging Dial Plans
  
  
• Managing Unified Messaging Mailbox Policies
  
  
• Managing Unified Messaging IP Gateways
  
  
• Managing Unified Messaging Hunt Groups
  
  
• Managing Unified Messaging Auto Attendants
  
  

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM IP gateways and UM hunt groups. After you complete the following procedure, the UM Configuration Administrators security group can manage UM IP gateways and hunt groups in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell

1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

   Note:
   Replace the domain name, Exchange organization, and accounts by using information for your organization.

   	Copy Code
   Add-ADPermission -Identity "CN=UM IPGateway Container,CN=ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll

3. If the command runs successfully, it will output the access control entries that were added to the object.

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM dial plans. After you complete the following procedure, the UM Configuration Administrators security group can manage UM dial plans in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell

1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

   Note:
   Replace the domain name, Exchange organization, and accounts by using information for your organization.

   	Copy Code
   Add-ADPermission -Identity "CN=UM DialPlan Container,CN= ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll

3. If the command runs successfully, it will output the access control entries that were added to the object.

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM mailbox policies. After you complete the following procedure, the UM Configuration Administrators security group can manage UM mailbox policies in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell

1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

   Note:
   Replace the domain name, Exchange organization, and accounts by using information for your organization.

   	Copy Code
   Add-ADPermission -Identity "CN=UM Mailbox Policies,CN=ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll

3. If the command runs successfully, it will output the access control entries that were added to the object.

In this section is an example that uses the Add-ADPermission cmdlet to add the required permissions to manage UM auto attendants. After you complete the following procedure, the UM Configuration Administrators security group can manage UM auto attendants in the contoso.com forest that contains the ContosoOrg Exchange organization.

To apply permissions by using the Exchange Management Shell

1. Log on to a system within the forest that has the Windows Support Tools installed and use an account that is delegated the necessary permissions, such as Membership in the Domain Administrators group.

2. Open the Exchange Management Shell and type the following commands for each container where you want to grant access.

   Note:
   Replace the domain name, Exchange organization, and accounts by using information for your organization.

   	Copy Code
   Add-ADPermission -Identity "CN=UM AutoAttendant Container,CN=ContosoOrg,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com" -User "contoso\UM Configuration Administrators" -AccessRights GenericAll

3. If the command runs successfully, it will output the access control entries that were added to the object.

For more information, see the following topics:

• Unified Messaging Split Permissions Recipient Management
  
  
• Unified Messaging Server Management