Correct Answer:
Explanation/Reference:
http://technet.microsoft.com/en-gb/library/dd876886(v=exchg.150).aspx
http://technet.microsoft.com/en-gb/library/dd298116(v=exchg.150).aspx#UnScoped
The Organization Management role group doesn’t, by default, have permissions to create or manage unscoped role groups. This is to prevent unscoped role groups from mistakenly being created or modified. The Organization Management role group can delegate the Unscoped Role Management management role to itself and other role assignees. For more information about how to create an unscoped top-level management role.
STEP 1: Grant Organization Management group access to to create unscoped roles.
New-ManagementRoleAssignment “Unscoped Role Management-Organization Management” -Role
“Unscoped Role Management” -SecurityGroup “Organization Management”
STEP 2: Create the Management Role
New-ManagementRole “Helpdesk Provisioning Script” -UnScopedTopLevel
STEP 3: Add management role entry to empty unscoped role.
Add-ManagementRoleEntry “Helpdesk Provisioning ScriptNew-CustomMailbox.ps1” -Parameters Name -UnScopedTopLevel
STEP 4: Assign management role to user group
New-ManagementRoleAssignment “Helpdesk Provisioning Script-Helpdesk Provisioning” -Role
“Helpdesk Provisioning Script” -SecurityGroup “Helpdesk Provisioning”