Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2011-03-19
Management role assignments assign a management role to a user or universal security group (USG). If you remove a role assignment, the users assigned the role will no longer have access to the cmdlets available on that role. For more information about management role assignments in Microsoft Exchange Server 2010, see Understanding Management Role Assignments.
You must use the Shell to remove role assignments.
Looking for other management tasks related to roles? Check out Managing Advanced Permissions.
Remove a management role assignment
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role assignments" entry in the Role Management Permissions topic.
If you know the name of the role assignment you want to remove, use the following syntax:
 Copy Code |
|
|---|---|
Remove-ManagementRoleAssignment <assignment name> |
|
For example, to remove the "Tier 2 Help Desk Assignment" role assignment, use the following command:
| Copy Code |
|
|---|---|
Remove-ManagementRoleAssignment "Tier 2 Help Desk Assignment" |
|
If you don't know the name of the role assignment, you can use the following syntax:
| Copy Code |
|
|---|---|
Get-ManagementRoleAssignment -RoleAssignee <user or USG> -Role <role name> -Delegating <$true | $false> | Remove-ManagementRoleAssignment |
|
For example, if you want to remove the Mail Recipients regular role assignment from the user davids, use the following command:
| Copy Code |
|
|---|---|
Get-ManagementRoleAssignment -RoleAssignee davids -Role "Mail Recipients" -Delegating $false | Remove-ManagementRoleAssignment |
|