Exchange Resource Manager

ERM Service Account

1. Member of domain users
2. Member of local administrators (or Builtin Administrators if the ERM host server is also a DC).
3. "Log on a as a batch job" user rights in the effective local security policy for the server.
4. ERM Service account must be granted "Send as" rights to the resource you are managing.

Logged-on account

1. Member of domain users
2. Member of local administrators (or Builtin Administrators if the ERM host server is also a DC).
3. Delegated full or normal Exchange Administrator rights
4. Member of the Account Operators group

Resources

1. “Send As” rights granted to ERM Service Account (done automatically as part of ERM-manage process)