Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Error when you try to remove or make a change to a distribution group by using Exchange Control Panel in Office 365: "You don't have sufficient permissions"


View products that this article applies to.

Symptoms

When you try to remove or make a change to a mail distribution group by using the Microsoft Exchange Control Panel (ECP) in a Microsoft Office 365 environment, you receive the following error message:
You don't have sufficient permissions. This operation can only be performed by a manager of the group.

↑ Back to the top


Cause

This issue may occur if the�ManagedBy attribute of the distribution group is empty or is configured for a user who is no longer active in Exchange Online. This issue could be caused by one of the following conditions:
  • You do not have sufficient permissions.
  • The administrator who originally created the distribution group is no longer in the organization.
  • You transitioned from Microsoft Business Productivity Online Standard Suite (BPOS-S) to Office 365, and the Owner permission is no longer set for the distribution group.
  • You are assigned the "Security Group Creation and Membership" role in the ECP. However, you cannot remove the distribution group.

↑ Back to the top


Resolution

To resolve this issue, follow these steps:
  1. Connect to Exchange Online by using Windows PowerShell. For more information about how to do this, visit the following Microsoft website:
  2. Perform the operation that you want by using the appropriate Windows PowerShell cmdlet.

    For example, to remove the distribution group, you can use the Remove-DistributionGroup cmdlet together with the BypassSecurityGroupManagerCheck parameter as follows:
    Remove-DistributionGroup <name of the group> -BypassSecurityGroupManagerCheck

Examples

The following are some examples of other Windows PowerShell cmdlets that you can use to manage distribution groups.

To assign ownership of a distribution group, use the Set-DistributionGroup cmdlet as follows:
Set-DistributionGroup <name of the group>-ManagedBy "Admin@contoso.com" -BypassSecurityGroupManagerCheck

To add a user to the distribution group, use the Set-DistributionGroup cmdlet as follows:
Add-DistributionGroupMember -Identity <name of the group>�-Member user@contoso.com

To remove a user from a distribution group, use the Remove-DistributionGroup cmdlet as follows:
Remove-DistributionGroupMember -Identity <name of the group> -Member user@contoso.com

To check the members list for a distribution group, use the Get-DistributionGroupMember cmdlet as follows:
Get-DistributionGroupMember -identity <name of the group>|fl DisplayName,WindowsLiveID,RecipientType

↑ Back to the top


References

Note�Customers who configure groups in Office 365 may later have to remove the groups even if those customers do not own the groups.

For more information about how to manage role groups in Exchange Online, visit the following Microsoft website:For more information about how to use Windows PowerShell in Exchange Online, visit the following Microsoft website:

↑ Back to the top


Keywords: KB2519370, o365, vkbportal237, bposs, vkbportal231

↑ Back to the top

Article Info
Article ID : 2519370
Revision : 10
Created on : 6/21/2012
Published on : 6/21/2012
Exists online : False
Views : 447