New-DistributionGroup -Name "Users of Sixth Floor"

Set-DistributionGroup -Identity "Users of Sixth floor" -ManagedBy Albert
Get-DistributionGroup "Users of Sixth Floor" | ft Name,ManagedBy

Set-DistributionGroup -Identity "Users of Sixth floor" -ManagedBy Angela.Cheng
Get-DistributionGroup "Users of Sixth Floor" | ft Name,ManagedBy

Angela.Cheng can add/remove a member to/from the group. Any member of Organizational Management role group can accomplish the same tasks.

The BypassSecurityGroupManagerCheck parameter specifies whether to bypass security checks and moderation for the member that's being added. Use this parameter when the specified distribution group is a moderated distribution group, and you want to bypass security checks and moderation for the member that's being added.

Run EMC as administrator

New-DistributionGroup -Name CEO -Type security

Set-DistributionGroup "CEO" -ManagedBy albert -ModerationEnabled:$True -ModeratedBy albert -MemberJoinRestriction 'ApprovalRequired'
Add-DistributionGroupMember -Identity CEO -Member angela.cheng
You don't have sufficient permissions. This operation can only be performed by a manager of the group.
+ CategoryInfo : NotSpecified: (:) [Add-DistributionGroupMember], OperationRequiresGroupManagerException
+ FullyQualifiedErrorId : 98DAA477,Microsoft.Exchange.Management.RecipientTasks.AddDistributionGroupMember

Add-DistributionGroupMember -Identity CEO -Member angela.cheng -BypassSecurityGroupManagerCheck

If you convert the CEO group from Distribution Security Group to Distribution Group, BypassSecurityGroupManagerCheck is meaningless.

ByPassSecurityGroupManagerCheck enables a user who hasn't been added to the ManagedBy property to add a member to a role group. The user must be a member of the Organization Management role group or be assigned, either directly or indirectly, the Role Management role.

Run EMC as administrator

New-RoleGroup -Name Seventh

Set-RoleGroup -Identity Seventh -ManagedBy Albert
You don't have sufficient permissions. This operation can only be performed by a manager of the group.
+ CategoryInfo : NotSpecified: (:) [Set-RoleGroup], OperationRequiresGroupManagerException
+ FullyQualifiedErrorId : 98DAA477,Microsoft.Exchange.Management.RbacTasks.SetRoleGroupnew

Set-RoleGroup -Identity Seventh -ManagedBy Albert -BypassSecurityGroupManagerCheck

Add-RoleGroupMember -Identity Seventh -Member Angela.Cheng
You don't have sufficient permissions. This operation can only be performed by a manager of the group.
+ CategoryInfo : NotSpecified: (:) [Add-RoleGroupMember], OperationRequiresGroupManagerException
+ FullyQualifiedErrorId : 98DAA477,Microsoft.Exchange.Management.RbacTasks.AddRoleGroupMember

Add-RoleGroupMember -Identity Seventh -Member Angela.Cheng -BypassSecurityGroupManagerCheck