View a List of Roles on a Role Group
Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
The management roles assigned to a management role group determine what tasks can be performed by the members of the role group. You can view the roles on a role group to see what the members of the role group can do. For more information about role groups in Microsoft Exchange Server 2010, see Understanding Management Role Groups.
Looking for other management tasks related to administrators and specialist users? Check out Managing Administrator and Specialist Users.
Use the ECP to view a list of roles on a role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
In the EMC, navigate to Toolbox in the console tree.
In the work pane, double-click Role Based Access Control (RBAC) User Editor to open the user editor in the Exchange Control Panel (ECP).
Provide credentials in the Domain\user name and Password fields for an account that has the permissions needed to open the user editor in the ECP. Click Sign in.
Click the Administrator Roles tab.
To view the list of roles on a role group, select the role group you want to view. The roles assigned to the role group are displayed in the details pane.
Use the Shell to view a basic list of roles assigned to a role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
You can use the Get-RoleGroup cmdlet to view a basic list of roles assigned to a role group. If you want to view more detailed information about the role assignments that assign a role to a role group, such as what management scopes are associated with the assignments, see "View a more detailed list of roles assigned to a role group" later in this topic.
To find the names of the role groups in your organization, use the following command.
Get-RoleGroupFind the name of the role group whose roles you want to list.
To list the roles on a role group, use the following syntax.
(Get-RoleGroup <role group name>).Roles
This example lists all of the roles assigned to the Organization Management role group.
(Get-RoleGroup "Organization Management").Roles
For detailed syntax and parameter information, see Get-RoleGroup.
Use the Shell to view a more detailed list of roles assigned to a role group
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.
You can use the Get-ManagementRoleAssignment cmdlet to view more detailed information about the role assignments that assign a role to a role group. If you want to view only a basic list of roles assigned to a role group, see "View a basic list of roles assigned to a role group" earlier in this topic.
To find the names of the role groups in your organization, use the following command.
Get-RoleGroupFind the name of the role group whose roles you want to list.
To list the roles on a role group, use the following syntax.
Get-ManagementRoleAssignment -RoleAssignee <role group name>
This example lists all of the roles assigned to the Organization Management role group.
Get-ManagementRoleAssignment -RoleAssignee "Organization Management"
This command displays the default information about the role assignment between the role group and the roles assigned to it. If you want to view other, more advanced, information about the role assignments on a role group, such as which role assignments are delegating or exclusive, see View Role Assignments.
For detailed syntax and parameter information, see Get-RoleGroup or Get-ManagementRoleAssignment.
Other Tasks
After you view the list of roles on a role group, you may also want to:
© 2010 Microsoft Corporation. All rights reserved.