Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

"The Delegates settings were not saved correctly" when you try to add a user to Exchange Server 2013 from Microsoft Outlook


View products that this article applies to.

Symptoms

When you try to add a user (delegate access) to Exchange Server 2013 from Microsoft Outlook, you receive the following error message: 

The Delegates settings were not saved correctly. Cannot activate send-on-behalf-of list. You do not have sufficient permissions to perform this operation on this object.

↑ Back to the top


Cause

This issue occurs because the MyMailboxDelegation role was not added during deployment of Exchange Server 2013.

↑ Back to the top


Resolution

Cumulative update information

For Exchange Server 2013

To resolve this issue, install Cumulative Update 14 for Exchange Server 2013 or a later cumulative update for Exchange Server 2013.

↑ Back to the top


More Information

To work around this issue, create a new role group which has permissions to enable and add delegates from Outlook. To do this, follow these steps:

  1. Create a new child role from the parent role "User Options" by using the following statement:

    New-ManagementRole -Name "MyMailboxdelegation" -Parent "user options"

  2. Include only those parameters which are required such as in the following example:

    Set-ManagementRoleEntry -Identity "MyMailboxdelegation\Set-Mailbox" -Parameters     SimpleDisplayName, RoomMailboxPassword, DisplayName, Password, OldPassword, NewPassword, AcceptMessagesOnlyFrom, AcceptMessagesOnlyFromDLMembers, AcceptMessagesOnlyFromSendersOrMembers, DeliverToMailboxAndForward, ErrorAction, ErrorVariable, ExternalOofOptions, ForwardingAddress, ForwardingSmtpAddress, Languages, MailTip, MailTipTranslations, OutBuffer, OutVariable, RejectMessagesFrom, RejectMessagesFromDLMembers, RejectMessagesFromSendersOrMembers, RequireSenderAuthenticationEnabled, UserCertificate, UserSMimeCertificate, WarningAction, WarningVariable -RemoveParameter -Confirm:$false

    Set-ManagementRoleEntry -Identity "MyMailboxdelegation\Get-Mailbox" -Parameters Database, Arbitration, RemoteArchive, Monitoring, PublicFolder -RemoveParameter -Confirm:$false

    Set-ManagementRoleEntry -Identity "MyMailboxdelegation\Set-Mailbox" -Parameters Identity –AddParameter -Confirm:$false

  3. Remove all other role entries such as in the following example:

    Get-ManagementRoleEntry MyMailboxdelegation\* | ? {$_.Name -ne "set-mailbox" -and $_.Name -ne "get-mailbox"} | Remove-ManagementRoleEntry -Confirm:$false

  4. Create a new role group by assigning the child role that you created in step 1 as in the following example:

    New-RoleGroup MailBoxDelegation -Roles MyMailboxdelegation

  5. You are ready with the new role group MyMailboxdelegation. Next, add the user who should be able to grant Delegate + Send On Behalf rights to the role group that you created in step 4 as in the following example:

    Add-RoleGroupMember MailBoxDelegation -Member "user_alias"

    Note You can also add members from Active Directory Users and Computers snap-in, click Microsoft Exchange Security Groups.

 

↑ Back to the top


Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 3132513
Revision : 2
Created on : 9/25/2018
Published on : 9/25/2018
Exists online : False
Views : 1240