Exchange Account Restore Permissions

To perform an Exchange Granular Restore, the following permissions are required for the account:

The account must be a domain account.
The account must be a member of the Administrator group.
The account must be a member of the Backup Operators group.
There must be a mailbox associated with the account and the mailbox must be initialized.
For Exchange Server 2003, 2007, and Exchange 2010 this mailbox must be in same Organization (Exchange Organization) of the Exchange server to which you plan to restore to (restore destination).
The name of the mailbox must be unique.
A unique name is a name that does not exist in the organization as a subset of characters in another mailbox name.

For example, if there is a mailbox named Administrator in your organization, you cannot use the name Admin.
The account user must have the proper role assignments:
- For Exchange Server 2003 systems, the User Name must be a domain account with Exchange full administrator role.
- For Exchange Server 2007 systems, the User Name must be a domain account with either the Exchange Organization administrator role or the Exchange server administrator role.
- For Exchange Server 2010 systems, the User Name must be a domain account with Exchange Organization management role.