Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

The management roles assigned to a management role group determine what tasks can be performed by the members of the role group. You can view the roles on a role group to see what the members of the role group can do. For more information about role groups in Microsoft Exchange Server 2010, see Understanding Management Role Groups.

Looking for other management tasks related to administrators and specialist users? Check out Managing Administrator and Specialist Users.

Use the ECP to view a list of roles on a role group

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.

  1. In the EMC, navigate to Toolbox in the console tree.

  2. In the work pane, double-click Role Based Access Control (RBAC) User Editor to open the user editor in the Exchange Control Panel (ECP).

  3. Provide credentials in the Domain\user name and Password fields for an account that has the permissions needed to open the user editor in the ECP. Click Sign in.

  4. Click the Administrator Roles tab.

  5. To view the list of roles on a role group, select the role group you want to view. The roles assigned to the role group are displayed in the details pane.

Use the Shell to view a basic list of roles assigned to a role group

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.

You can use the Get-RoleGroup cmdlet to view a basic list of roles assigned to a role group. If you want to view more detailed information about the role assignments that assign a role to a role group, such as what management scopes are associated with the assignments, see "View a more detailed list of roles assigned to a role group" later in this topic.

  1. To find the names of the role groups in your organization, use the following command.

    Copy Code
    Get-RoleGroup
    
  2. Find the name of the role group whose roles you want to list.

  3. To list the roles on a role group, use the following syntax.

    Copy Code
    (Get-RoleGroup <role group name>).Roles
    

This example lists all of the roles assigned to the Organization Management role group.

Copy Code
(Get-RoleGroup "Organization Management").Roles

For detailed syntax and parameter information, see Get-RoleGroup.

Use the Shell to view a more detailed list of roles assigned to a role group

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.

You can use the Get-ManagementRoleAssignment cmdlet to view more detailed information about the role assignments that assign a role to a role group. If you want to view only a basic list of roles assigned to a role group, see "View a basic list of roles assigned to a role group" earlier in this topic.

  1. To find the names of the role groups in your organization, use the following command.

    Copy Code
    Get-RoleGroup
    
  2. Find the name of the role group whose roles you want to list.

  3. To list the roles on a role group, use the following syntax.

    Copy Code
    Get-ManagementRoleAssignment -RoleAssignee <role group name>
    

This example lists all of the roles assigned to the Organization Management role group.

Copy Code
Get-ManagementRoleAssignment -RoleAssignee "Organization Management"

This command displays the default information about the role assignment between the role group and the roles assigned to it. If you want to view other, more advanced, information about the role assignments on a role group, such as which role assignments are delegating or exclusive, see View Role Assignments.

For detailed syntax and parameter information, see Get-RoleGroup or Get-ManagementRoleAssignment.

Other Tasks