View a List of Roles on an Assignment Policy

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

The management roles assigned to an assignment policy determine what actions the end users who are assigned the assignment policy can perform. By viewing the list of roles assigned to an assignment policy, you can see what actions the users assigned that assignment policy can perform. For more information about role assignment policies, see Understanding Management Role Assignment Policies.

Looking for other management tasks related to end users? Check out Managing End Users.

Use the ECP to view a list of roles on an assignment policy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.

1. In the Exchange Management Console (EMC), navigate to Toolbox in the console tree.

2. In the work pane, double-click Role Based Access Control (RBAC) User Editor to open the user editor in the Exchange Control Panel (ECP).

3. Provide credentials in the Domain\user name and Password fields for an account that has the permissions needed to open the user editor in the ECP. Click Sign in.

4. Click the User Roles tab.

5. To view the list of roles on an assignment policy, select the assignment policy you want to view. The roles assigned to the assignment policy are displayed in the details pane.

Use the Shell to view a list of roles on an assignment policy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.

You can use the Get-ManagementRoleAssignment cmdlet to view the list of roles assigned to an assignment policy.

1. To find the names of the assignment policies in your organization, use the following command.

   Get-RoleAssignmentPolicy
   

2. Find the name of the assignment policy whose roles you want to list.

3. To list the roles on an assignment policy, use the following syntax.

   Get-ManagementRoleAssignment -RoleAssignee <assignment policy name>
   

This example lists all of the roles assigned to the Default Role Assignment Policy assignment policy.

Get-ManagementRoleAssignment -RoleAssignee "Default Role Assignment Policy"

For detailed syntax and parameter information, see Get-RoleAssignmentPolicy or Get-ManagementRoleAssignment.

Other Tasks

After you view the list of roles assigned to an assignment policy, you may also want to:

• Add a Role to an Assignment Policy

• Remove a Role from an Assignment Policy

• Add an Assignment Policy

• Change the Assignment Policy on a Mailbox

 © 2010 Microsoft Corporation. All rights reserved.