Applies to: Exchange Server 2013, Exchange Online

Topic Last Modified: 2012-10-08

This topic shows you how to add, remove and view members of a management role group in Microsoft Exchange Server 2013. For more information about role groups in Exchange 2013, see Understanding Management Role Groups.

For additional management tasks related to role groups, see Permissions.

What do you need to know before you begin?

  • Estimated time to complete each procedure: 5 minutes

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection

What do you want to do?

Add members to a role group

To give a user the permissions that are granted by a role group, you need to add the user, or a universal security group (USG), or another role group that the user is a member of, as a member of the role group.

Use the EAC to add members to a role group

  1. In the Exchange Administration Center (EAC), navigate to Permissions > Admin Roles.

  2. Select the role group you want to add members to, and then click Edit Edit Icon.

  3. In the Members section, click Add Add Icon.

  4. Select the users, USGs, or other role groups you want to add to the role group, click Add, and then click OK.

  5. Click Save to save the changes to the role group.

Use the Shell to add members to a role group

To add a role group member, see the Examples section in Add-RoleGroupMember.

To add multiple role group members or to replace the role group membership entirely, see the Examples section in Update-RoleGroupMember.

How do you know this worked?

To verify that you have successfully added one or more members to a role group, do the following:

  1. In the EAC, navigate to Permissions > Admin Roles.

  2. Select the role group you added members to.

  3. In the role group details pane, verify that the members you added are listed.

Remove members from a role group

To remove the permissions granted by a role group from a user, you need to remove the user, or the universal security group (USG) the user is a member of, from the role group's membership.

Use the EAC to remove members from a role group

  1. In the EAC, navigate to Permissions > Admin Roles.

  2. Select the role group you want to remove members from, and then click Edit Edit Icon.

  3. In the Members section, select the members you want to remove, click Remove Remove, and then click Save.

Use the Shell to remove members from a role group

To remove a role group member, see the Examples section in Remove-RoleGroupMember.

To remove multiple role group members or to replace the role group membership entirely, see the Examples section in Update-RoleGroupMember.

How do you know this worked?

To verify that you have successfully removed one or more members to a role group, do the following:

  1. In the EAC, navigate to Permissions > Admin Roles.

  2. Select the role group you removed members from.

  3. In the role group details pane, verify that the members you removed are no longer listed.

View the members of a role group

The members of a role group are granted the permissions provided by the management roles assigned to the role group. You can view the members of a role group to see which users, universal security groups (USG), or other role groups are granted permissions by the role group you specify.

Use the EAC to view the members of a role group

  1. In the EAC, navigate to Permissions > Admin Roles.

  2. Select the role group you want to view the members of.

  3. In the role group details pane, view the members in the role group details pane.

Use the Shell to view the members of a role group

To view the members of a role group, see the “Examples” section in Get-RoleGroupMember.