Permissions needed by the Exchange integration

This section describes the permissions needed by the accounts that are re- quired for the Exchange integration. The information explains the permissions required for each account, to give an administrator an overview of the security model of the integration.

TMS-service

This user is created as a local administrator on the Exchange server because it needs permissions such as:

•Log on as a Batch job

•Log on as a service

•Write permissions to the TANDBERG Key in the registry

•Read permissions from the TANDBERG Key in the registry

•Write permissions to log files

•Read permissions to log files and the integration components’

•Activate permissions to the TANDBERG COM+ package

TMSConfUser

•Must have access to login to TMS

•Needs to be a member that has ‘Book on behalf of’ permissions in TMS

•Must have ‘Exchange Integration Service Account’ set to Yes

VC mailboxes

•Normal mailbox users

Video Conference Users

•Gives users of this group read/book permission to change and delete their own meetings.

Video Conference Admins

•Gives users of this group permission to change and delete all meetings.