Remove a Role from a User or USG

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Management role assignments assign a management role to a user or universal security group (USG). If you remove a role assignment, the users assigned the role will no longer have access to the cmdlets available on that role. For more information about management role assignments in Microsoft Exchange Server 2010, see Understanding Management Role Assignments.

You must use the Shell to remove role assignments.

Looking for other management tasks related to roles? Check out Managing Advanced Permissions.

Remove a management role assignment

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role assignments" entry in the Role Management Permissions topic.

If you know the name of the role assignment you want to remove, use the following syntax:

Remove-ManagementRoleAssignment <assignment name>

For example, to remove the "Tier 2 Help Desk Assignment" role assignment, use the following command:

Remove-ManagementRoleAssignment "Tier 2 Help Desk Assignment"

If you don't know the name of the role assignment, you can use the following syntax:

Get-ManagementRoleAssignment -RoleAssignee <user or USG> -Role <role name> -Delegating <$true | $false> | Remove-ManagementRoleAssignment 

For example, if you want to remove the Mail Recipients regular role assignment from the user davids, use the following command:

Get-ManagementRoleAssignment -RoleAssignee davids -Role "Mail Recipients" -Delegating $false | Remove-ManagementRoleAssignment 

 © 2010 Microsoft Corporation. All rights reserved.