I have a group of people that I need to grant the ability to enable or disable ActiveSync access to mailboxes. Researching RBAC roles I have found where I can setup a custom role where they have just set-casmailbox functionality. But with that functionality they also have access to enable/disable OWAEnabled, PopEnabled, ImapEnabled, MapiEnabled.
So far I haven't found any articles about limiting the set-casmailbox command to only the -ActiveSyncEnabled parameter.
Any thoughts?
I'm on a Exchange 2010 SP2 environment.