After completion of the Exchange 2016 in my Lab environment, when i tried to login into Exchange Admin Center,
suddenly i received error - 400 Outlook Web App Option :( with following description:
"There was a problem opening options in Outlook Web App. Please click sign out blew, then sign in to Option in Outlook Web App again. If doesn't work, sign out, delete browser cookies, and sign in again."
You're missing permissions for administering the exchange server(s).
Your exchange 2016 administrator account must be in Organization Management, Records Management and Recipient Management role group.
Organization Management
Administrators that are members of the Organization Management role group have administrative access to the entire Exchange 2013 organization and can perform almost any task against any Exchange 2013 object, with some exceptions. By default, members of this role group can't perform mailbox searches and management of unscoped top-level management roles. For more information, see the "Delegating Only Role Assignments" section later in this topic.
From <https://docs.microsoft.com/en-us/exchange/organization-management-exchange-2013-help>
Adding permissions through AD:
Adding permissions through Powershell:
[PS] C:\Users\Dani\Desktop>Get-Command *role* -Module Microsoft.Exchange.Management.PowerShell.SnapIn
CommandType Name Version Source
----------- ---- ------- ------
Cmdlet Add-ManagementRoleEntry 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Add-RoleGroupMember 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Get-ManagementRole 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Get-ManagementRoleAssignment 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Get-ManagementRoleEntry 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Get-RoleAssignmentPolicy 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Get-RoleGroup 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Get-RoleGroupMember 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet New-ManagementRole 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet New-ManagementRoleAssignment 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet New-RoleAssignmentPolicy 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet New-RoleGroup 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Remove-ManagementRole 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Remove-ManagementRoleAssignment 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Remove-ManagementRoleEntry 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Remove-RoleAssignmentPolicy 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Remove-RoleGroup 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Remove-RoleGroupMember 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Set-ManagementRoleAssignment 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Set-ManagementRoleEntry 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Set-RoleAssignmentPolicy 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Set-RoleGroup 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
Cmdlet Update-RoleGroupMember 15.0.0.0 Microsoft.Exchange.Management.PowerShell.SnapIn
[PS] C:\Users\DanielBlan\Desktop>get-rolegroup "organization management"
Name AssignedRoles RoleAssignments ManagedBy
---- ------------- --------------- ---------
Organization Management {} {} {DOMAIN.NET/Microsoft Exchange Security Groups/Organization Management}
[PS] C:\Users\Dani\Desktop>Get-RoleGroupMember "Organization Management"
Name RecipientType
---- -------------
Name1 UserMailbox
Name2 User
[PS] C:\Users\Dani\Desktop>add-RoleGroupMember "Organization Management" -member dani
Adding permissions through EMC:
First of all i verify the privileges in my login account
I logged in with Administrator account click on permission TAB
Select double click Organization Management
Than check the Members of Active Directory Permission from Roles, which my account was missing, and problem with my account which i'm using for login.
finally i added my account on "Active Directory Permissions"
Once completed logged off from Administrator account and tried to log in with my account and successfully logged in to Exchange Admin Center.
I know it's very basic, but some time we are getting confused where the things went wrong, hope fully it will help you for pre-requisite or assigning the delegation to your team mate.
Thanks,
Welcome for valuable comments...
From <https://ucservice.blogspot.com/2016/03/exchange-2016-ecp-login-error-400.html>