Exchange Online · Permissions & Delegation
Delegated Setup
Allows limited administrative access for initial Exchange setup and configuration tasks.
Scope: Exchange setup and installation tasks
Permissions
- Perform initial Exchange configuration
- Install and configure Exchange servers (hybrid)
- Add servers to existing Exchange organization
- Limited post-installation configuration
Common use cases
- Hybrid Exchange deployment
- Initial tenant configuration
- Edge server setup
Best practices
- Use only for initial deployment phases
- Remove from role after setup complete
- Document setup procedures
Common questions
When should I assign the Delegated Setup role?
Assign Delegated Setup when you need to: Hybrid Exchange deployment; Initial tenant configuration; and Edge server setup. It is part of Exchange Online and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Delegated Setup role do?
The Delegated Setup role grants permissions including: Perform initial Exchange configuration; Install and configure Exchange servers (hybrid); Add servers to existing Exchange organization; and Limited post-installation configuration. See the Permissions section above for the full list.