In Exchange 2010:
A single user is configured to connect to mailboxes of all other CRM users and queues that have their mailboxes on Microsoft Exchange Server 2010. This configuration hence makes do with the need to create profile for each CRM user and queue individually.
To achieve this you need to run the following command in Exchange Management Shell–
New-ManagementRoleAssignment –Name: "ImpersonationName”
-User: "RouterAdministrator@YourOrganization.com" –Role:"ApplicationImpersonation”
In the above command, the Name parameter specifies a name for the new management role assignment. User is the username of the user who is given Exchange Impersonation permission and therefore can now access Exchange 2010 mailboxes of all other users in the Exchange organization.
[Details on New-ManagementRoleAssignment can be found here]
2. A single user is configured to connect to mailboxes of select set of CRM users and queues that have their mailboxes on Microsoft Exchange Server 2010. This configuration is preferable as the impersonation rights are given selectively on the desired mailboxes only.
To enable this scenario, you need to define the set of users as a Management Scope in Microsoft Exchange Server 2010. To do so, run the following command in Exchange Management Shell–
New-ManagementScope –Name: "ManagementScopeName"
–RecipientRestrictionFilter { Name -eq ‘ crmuser1 ’ }
In the above command, The Name parameter specifies the name of the management scope. The RecipientRestrictionFilter parameter specifies the filter to apply to recipient objects.
[Details on New-ManagementScope can be found here]
The new Management Scope created can now be used in the Role Assignment command to restrict the scope of Exchange Impersonation.
New-ManagementRoleAssignment –Name: "ImpersonationName”
-User: "RouterAdministrator@YourOrganization.com" –Role:"ApplicationImpersonation”
-CustomRecipientWriteScope: ”ManagementScopeName”