Microsoft® Exchange Server 2010 Inside Out

Role assignment

To summarize so far, we have defined scopes to say what objects a role can access and update, a role to say what cmdlets and parameters are made available to the holders of the role, and role groups to help manage who can do what. Role assignments provide what Microsoft refers to as the glue for RBAC in that they link roles and their scope to users or groups. To see the complete set of role assignments in the organization, type:

Get-ManagementRoleAssignment

Exchange 2010 SP1 includes 176 role assignments ordered by assignee name. In other words, all of the roles assigned to the Organization Management role group are found together, as are all of the roles assigned to the other role groups such as Hygiene Management, Discovery Management, ...