Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2012-07-23
The management roles assigned to an assignment policy determine what actions the end users who are assigned the assignment policy can perform. By viewing the list of roles assigned to an assignment policy, you can see what actions the users assigned that assignment policy can perform. For more information about role assignment policies, see Understanding Management Role Assignment Policies.
Looking for other management tasks related to end users? Check out Managing End Users.
Use the ECP to view a list of roles on an assignment policy
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
- In the Exchange Management Console (EMC), navigate to
Toolbox in the console tree.
- In the work pane, double-click Role Based Access Control
(RBAC) User Editor to open the user editor in the Exchange
Control Panel (ECP).
- Provide credentials in the Domain\user name and
Password fields for an account that has the permissions
needed to open the user editor in the ECP. Click Sign
- Click the User Roles tab.
- To view the list of roles on an assignment policy, select the
assignment policy you want to view. The roles assigned to the
assignment policy are displayed in the details pane.
Use the Shell to view a list of roles on an assignment policy
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
You can use the Get-ManagementRoleAssignment cmdlet to view the list of roles assigned to an assignment policy.
- To find the names of the assignment policies in your
organization, use the following command.
- Find the name of the assignment policy whose roles you want to
- To list the roles on an assignment policy, use the following
Get-ManagementRoleAssignment -RoleAssignee <assignment policy name>
This example lists all of the roles assigned to the Default Role Assignment Policy assignment policy.
Get-ManagementRoleAssignment -RoleAssignee "Default Role Assignment Policy"