Can anyone tell me what are the minmum Exchange permissions needed to perform user admin for bes 3.6 (and bes 4). I need to delegate user admin to some other staff in our organisation and want to tie it down as much as possible.

'Exchange view only admins' seems to be OK on BES4 as long as you give the administrative account full mailbox access to the BES service account - but doesn't work for BES 3.6, complains of insufficient permissions.

Do i need to give out permissions at Information store level too?