Fix Exchange Admin Center Cannot Save Mailbox Import Export Role
Question details
Administrators are unable to add the Mailbox Import Export role to Organization Management in the Exchange Admin Center due to a save failure.
- Product
- Exchange Online
- Device & OS
- not provided
- Scenario
- Attempting to assign the Mailbox Import Export role in Microsoft 365 Exchange Online to manage user mailboxes.
- Observed behavior
- The system displays a 'We couldn't save your changes' error message when applying the permission change, preventing the role from being assigned.
Ensure you are logged in with Global Administrator or Exchange Administrator privileges and have the ExchangeOnlineManagement module installed in PowerShell.
Run Enable-OrganizationCustomization via PowerShell
Force the tenant to allow customization changes by running a specific PowerShell cmdlet, which often clears backend permission locks.
Many Microsoft 365 Exchange Online tenants are created in a compressed or 'dehydrated' state by default. You must run a command to 'hydrate' the tenant before making certain role changes in the Admin Center.
Open Windows PowerShell as an administrator and use the Connect-ExchangeOnline cmdlet to authenticate with your Microsoft 365 admin credentials.
Type Enable-OrganizationCustomization and press Enter. Wait for the command execution to complete.
Return to the Exchange Admin Center. Even if PowerShell indicates that customization is already enabled, attempt to save the Mailbox Import Export role again.
Allow Time for Propagation
Wait for backend synchronization if the PowerShell command does not immediately resolve the save error.
Contact Microsoft 365 Support
Escalate the issue to Microsoft Support or your license reseller if the error persists after enabling customization and waiting.
Equip Your Organization with WPS Office
While resolving Exchange Admin Center permissions requires Microsoft's administrative tools, providing your team with powerful document productivity software shouldn't tie you exclusively to expensive licenses. WPS Office is a robust, user-friendly, and completely free alternative office suite.
- 1. Download the software: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install the suite: Run the installer and follow the simple on-screen prompts to set up WPS Office on your workstation.
- 3. Start creating and editing: Open WPS Writer, Spreadsheet, or Presentation to immediately start managing your files with full Microsoft Office compatibility.
Frequently Asked Questions
Why is the Mailbox Import Export role missing by default in Exchange?
For security and privacy reasons, Microsoft does not assign the Mailbox Import Export role to any administrator group by default. It must be manually added to the Organization Management role group to prevent unauthorized extraction of sensitive mailbox data.
Can I assign the Mailbox Import Export role via PowerShell instead of the Admin Center?
Yes. You can bypass the web interface errors by using the New-ManagementRoleAssignment cmdlet in Exchange Online PowerShell to assign the role directly to a specific user or admin group.
What is tenant dehydration in Microsoft 365?
Tenant dehydration is a backend mechanism Microsoft uses to consolidate configurations and save server space by sharing default settings across multiple organizations. Running Enable-OrganizationCustomization 'hydrates' the tenant, creating a unique copy of the settings that administrators can modify.
