Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2012-07-23
You can view management role assignment policies in a variety of ways, depending on the information you want and whether you're using the Exchange Control Panel (ECP) or the Exchange Management Shell.
In the ECP, you can view the list of assignment policies and the roles assigned to them. In the Shell, you can view all the assignment policies in your organization, list the mailboxes assigned a specific policy, and more.
For more information about assignment policies in Microsoft Exchange Server 2010, see Understanding Management Role Assignment Policies.
Looking for other management tasks related to end users? Check out Managing End Users.
Use the ECP to view a list of assignment policies
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
- In the Exchange Management Console (EMC), navigate to
Toolbox in the console tree.
- In the work pane, double-click Role Based Access Control
(RBAC) User Editor to open the user editor in the Exchange
Control Panel (ECP).
- Provide credentials in the Domain\user name and
Password fields for an account that has the permissions
needed to open the user editor in the ECP. Click Sign
in.
- Click the User Roles tab.
- To view the details of a specific assignment policy, select the
assignment policy you want to view. The description and the roles
assigned to the assignment policy are displayed in the details
pane.
Use the Shell to view a list of assignment policies
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
You can view a list of all the assignment policies in your organization by not specifying any assignment policies when you run the Get-RoleAssignmentPolicy cmdlet.
This procedure makes use of pipelining and the Format-Table cmdlet. For more information about these concepts, see the following topics:
To return a list of all assignment policies in your organization, use the following command.
Copy Code | |
---|---|
Get-RoleAssignmentPolicy |
To return a list of specific properties for all the assignment policies in your organization, you can pipe the results to the Format-Table cmdlet and specify the properties you want in the list of results. Use the following syntax.
Copy Code | |
---|---|
Get-RoleAssignmentPolicy | Format-Table <property 1>, <property 2...> |
This example returns a list of all the assignment policies in your organization and includes the Name and IsDefault properties.
Copy Code | |
---|---|
Get-RoleAssignmentPolicy | Format-Table Name, IsDefault |
For detailed syntax and parameter information, see Get-Mailbox or Get-RoleAssignmentPolicy.
Use the Shell to view the details of a single assignment policy
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
You can view the details of a specific assignment policy by using the Get-RoleAssignmentPolicy cmdlet and piping the output to the Format-List cmdlet.
This procedure makes use of pipelining and the Format-List cmdlet. For more information about these concepts, see the following topics:
To view the details of a specific assignment policy, use the following syntax.
Copy Code | |
---|---|
Get-RoleAssignmentPolicy <assignment policy name> | Format-List |
This example views the details about the Redmond Users - no Text Messaging assignment policy.
Copy Code | |
---|---|
Get-RoleAssignmentPolicy "Redmond Users - no Text Messaging" | Format-List |
For detailed syntax and parameter information, see Get-Mailbox or Get-RoleAssignmentPolicy.
Use the Shell to find the default assignment policy
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
You can find the default assignment policy by piping
the output of the Get-RoleAssignmentPolicy cmdlet to the
Where cmdlet. With the Where cmdlet, filter the data
returned to display only the assignment policy that has its
IsDefault property set to $True
.
This procedure makes use of pipelining and the Where cmdlet. For more information about these concepts, see the following topics:
This example returns the default assignment policy.
Copy Code | |
---|---|
Get-RoleAssignmentPolicy | Where { $_.IsDefault -eq $True } |
For detailed syntax and parameter information, see Get-Mailbox or Get-RoleAssignmentPolicy.
Use the Shell to view mailboxes that are assigned a specific policy
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
You can find all of the mailboxes assigned a specific assignment policy by piping the output of the Get-Mailbox cmdlet to the Where cmdlet. With the Where cmdlet, filter the data returned to display only the mailboxes that have their RoleAssignmentPolicy property set to the assignment policy name you specify.
This procedure makes use of pipelining and the Where cmdlet. For more information about these concepts, see the following topics:
Use the following syntax.
Copy Code | |
---|---|
Get-Mailbox | Where { $_.RoleAssignmentPolicy -Eq "<role assignment policy>" } |
This example finds all the mailboxes assigned the policy Vancouver End Users.
Copy Code | |
---|---|
Get-Mailbox | Where { $_.RoleAssignmentPolicy -Eq "Vancouver End Users" } |
For detailed syntax and parameter information, see Get-Mailbox or Get-RoleAssignmentPolicy.
Other Tasks
After you view a list of assignment policies, you may also want to: