Like custom RBAC roles for administrators, you can also create custom roles that apply to your end users. This may be useful when you need to allow them to modify additional configuration settings that apply to their own accounts through the ECP. This recipe will provide a real-world example of how you might implement a custom RBAC role for end users in your Exchange organization.
When users log on to ECP, they have the ability to modify their work phone number, fax number, home phone number, and mobile phone number, among other things. Let's say that we need to limit this so that they can only update their home phone number, as their work, fax, and mobile numbers will be managed by the administrators in your organization.
Since built-in roles cannot be modified, we need to create a custom role based on one of the existing built-in roles. Use the following steps to implement a custom RBAC role for end users based on the previous requirements...