View Role Entries
Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Each management role entry represents a single cmdlet or script. The parameters included on a role entry determine what parameters on the cmdlet or script a user can access.
The identity of role entries consists of the management role name that the role entry is associated with, and the cmdlet or script that the role entry refers to. For more information about role entries in Microsoft Exchange Server 2010, see Understanding Management Roles.
You must use the Shell to view role entries.
Looking for other management tasks related to role entries? Check out Managing Advanced Permissions.
Prerequisites
This topic makes use of pipelining, the Format-List cmdlet, objects, and properties. For more information about these concepts, see the following topics:
What Do You Want To Do?
View a list of role entries
View a list of all role entries on a role
View a list of roles that contain a specific role entry
View a targeted list of roles that contain similar role entries
View a single role entry
View the parameters on a single role entry
View a list of role entries
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Management role entries" entry in the Role Management Permissions topic.
You can use the Get-ManagementRoleEntry cmdlet to retrieve a list of role entries. When you use the Get-ManagementRoleEntry cmdlet, you must specify a value that contains both the role name that contains the role entries you want to list and also the cmdlet name of the role entry you want to list. By combining the role name and cmdlet name with the wildcard character (*), you can return specific or broad lists of role entries.
For detailed syntax and parameter information, see Get-ManagementRoleEntry.
View a list of all role entries on a role
To view a list of role entries on a specific role, use the following syntax.
Get-ManagementRoleEntry <role name>\*
This examples retrieves all the role entries on the Recipient Administrators role.
Get-ManagementRole "Recipient Administrators\*"
For detailed syntax and parameter information, see Get-ManagementRoleEntry.
View a list of roles that contain a specific role entry
To view a list of all the roles that contain a specific role entry, use the following syntax.
Get-ManagementRoleEntry *\<cmdlet name>
This example retrieves all the roles that contain the Set-Mailbox role entry.
Get-ManagementRoleEntry *\Set-Mailbox
For detailed syntax and parameter information, see Get-ManagementRoleEntry.
View a targeted list of roles that contain similar role entries
To view a list of targeted roles that contain cmdlets with similar names, use the following syntax.
Get-ManagementRoleEntry *<partial role name>*\*<partial cmdlet name>*
This example returns a list of role entries that contain the string Mailbox that are on roles that contain the string Tier 1 in their names.
Get-ManagementRoleEntry "*Tier 1*\*Mailbox*"
For detailed syntax and parameter information, see Get-ManagementRoleEntry.
View a single role entry
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Management role entries" entry in the Role Management Permissions topic.
To view the details of a single role entry, use the following syntax.
Get-ManagementRoleEntry <role name>\<cmdlet name> | Format-List
This example retrieves the details of the Set-Mailbox role entry on the Recipient Administrators role.
Get-ManagementRoleEntry "Recipient Administrators\Set-Mailbox" | Format-List
If the role entry you view has too many parameters to list using the Format-List cmdlet, see "View the parameters on a single role entry" later in this topic.
For detailed syntax and parameter information, see Get-ManagementRoleEntry.
View the parameters on a single role entry
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Management role entries" entry in the Role Management Permissions topic.
Some role entries have more parameters than can be viewed by piping the results of the Get-ManagementRoleEntry cmdlet to the Format-List cmdlet. If you need to view all the parameters on a role entry, you need to directly access the Parameters property of the role entry object.
To view parameters stored in the Parameters property of a role entry object, use the following syntax.
(Get-ManagementRoleEntry <role name>\<cmdlet name>).Parameters
This example retrieves the parameters on the Set-Mailbox role entry on the Mail Recipients role.
(Get-ManagementRoleEntry "Mail Recipients\Set-Mailbox").Parameters
For detailed syntax and parameter information, see Get-ManagementRoleEntry.
© 2010 Microsoft Corporation. All rights reserved.