Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2012-07-23
The management roles assigned to a management role group determine what tasks can be performed by the members of the role group. You can view the roles on a role group to see what the members of the role group can do. For more information about role groups in Microsoft Exchange Server 2010, see Understanding Management Role Groups.
Looking for other management tasks related to administrators and specialist users? Check out Managing Administrator and Specialist Users.
Use the ECP to view a list of roles on a role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
- In the EMC, navigate to Toolbox in the console tree.
- In the work pane, double-click Role Based Access Control
(RBAC) User Editor to open the user editor in the Exchange
Control Panel (ECP).
- Provide credentials in the Domain\user name and
Password fields for an account that has the permissions
needed to open the user editor in the ECP. Click Sign
in.
- Click the Administrator Roles tab.
- To view the list of roles on a role group, select the role
group you want to view. The roles assigned to the role group are
displayed in the details pane.
Use the Shell to view a basic list of roles assigned to a role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
You can use the Get-RoleGroup cmdlet to view a basic list of roles assigned to a role group. If you want to view more detailed information about the role assignments that assign a role to a role group, such as what management scopes are associated with the assignments, see "View a more detailed list of roles assigned to a role group" later in this topic.
- To find the names of the role groups in your organization, use
the following command.
Copy Code Get-RoleGroup
- Find the name of the role group whose roles you want to
list.
- To list the roles on a role group, use the following
syntax.
Copy Code (Get-RoleGroup <role group name>).Roles
This example lists all of the roles assigned to the Organization Management role group.
Copy Code | |
---|---|
(Get-RoleGroup "Organization Management").Roles |
For detailed syntax and parameter information, see Get-RoleGroup.
Use the Shell to view a more detailed list of roles assigned to a role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
You can use the Get-ManagementRoleAssignment cmdlet to view more detailed information about the role assignments that assign a role to a role group. If you want to view only a basic list of roles assigned to a role group, see "View a basic list of roles assigned to a role group" earlier in this topic.
- To find the names of the role groups in your organization, use
the following command.
Copy Code Get-RoleGroup
- Find the name of the role group whose roles you want to
list.
- To list the roles on a role group, use the following
syntax.
Copy Code Get-ManagementRoleAssignment -RoleAssignee <role group name>
This example lists all of the roles assigned to the Organization Management role group.
Copy Code | |
---|---|
Get-ManagementRoleAssignment -RoleAssignee "Organization Management" |
This command displays the default information about the role assignment between the role group and the roles assigned to it. If you want to view other, more advanced, information about the role assignments on a role group, such as which role assignments are delegating or exclusive, see View Role Assignments.
For detailed syntax and parameter information, see Get-RoleGroup or Get-ManagementRoleAssignment.
Other Tasks
After you view the list of roles on a role group, you may also want to: