Manage role group members in Exchange Server
To learn about role groups in Exchange Server, see Understanding Management Role Groups.
For additional management tasks related to role groups, see Permissions.
What do you need to know before you begin?
Estimated time to complete each procedure: 5 minutes
To open the EAC, see Exchange admin center in Exchange Server. To open the Exchange Management Shell, see Open the Exchange Management Shell.
You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Role groups" entry in the Role management permissions topic.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.
Tip
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection.
Add members to a role group
To give a user the permissions that are granted by a role group, you need to add the user, or a universal security group (USG), or another role group that the user is a member of, as a member of the role group.
Use the EAC to add members to a role group
In the Exchange admin center (EAC), navigate to Permissions > Admin Roles.
Select the role group you want to add members to, and then click Edit
.In the Members section, click Add
.Select the users, USGs, or other role groups you want to add to the role group, click Add, and then click OK.
Click Save to save the changes to the role group.
Use the Exchange Management Shell to add members to a role group
To add a role group member, see the Examples section in Add-RoleGroupMember.
To add multiple role group members or to replace the role group membership entirely, see the Examples section in Update-RoleGroupMember.
How do you know this worked?
To verify that you have successfully added one or more members to a role group, do the following:
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you added members to.
In the role group details pane, verify that the members you added are listed.
Remove members from a role group
To remove the permissions granted by a role group from a user, you need to remove the user, or the universal security group (USG) the user is a member of, from the role group's membership.
Use the EAC to remove members from a role group
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you want to remove members from, and then click Edit
.In the Members section, select the members you want to remove, click Remove
, and then click Save.
Use the Exchange Management Shell to remove members from a role group
To remove a role group member, see the Examples section in Remove-RoleGroupMember.
To remove multiple role group members or to replace the role group membership entirely, see the Examples section in Update-RoleGroupMember.
How do you know this worked?
To verify that you have successfully removed one or more members to a role group, do the following:
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you removed members from.
In the role group details pane, verify that the members you removed are no longer listed.
View the members of a role group
The members of a role group are granted the permissions provided by the management roles assigned to the role group. You can view the members of a role group to see which users, universal security groups (USG), or other role groups are granted permissions by the role group you specify.
Use the EAC to view the members of a role group
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you want to view the members of.
In the role group details pane, view the members in the role group details pane.
Use the Exchange Management Shell to view the members of a role group
To view the members of a role group, see the "Examples" section in Get-RoleGroupMember.