Its always a problem on finding, What Roles the Current user is Assigned to, Not sure on what all he has having access to.
You can use the Below PowerShell Command to Find in which role assigments the user is part of in Exchange Role based acess groups.
Replace with “Username” with the Alias of the mailbox
Get-ManagementRoleAssignment -GetEffectiveUsers | Where-Object {$_.EffectiveUserName -eq "Username"} | select-object Role
Satheshwaran Manoharan - Microsoft MVP - Award-winning Technology Leader with a wealth of experience running large teams and diversified industry exposure in cloud computing. From shipping lines to rolling stocks.In-depth expertise in driving cloud adoption strategies and modernizing systems to cloud native. Specialized in Microsoft Cloud, DevOps, and Microsoft 365 Stack and conducted numerous successful projects worldwide. Also, Acting as a Technical Advisor for various start-ups.
Contact : Info@Azure365Pro.com
© Azure365Pro.com
That’s a nice post.
I try, it’ works, and it’s helpful.
Keep posting helpful article.
Your most welcome Sendi
Hi Satheshwaran,
Can we know which commands a perticular user(admin) can execute depend on the permissions given to him?
Regards,
Hemant
Check what all roles assigned to the user. = Check what all the commands the role contains.
or
login as him — run — Get-command
It didn’t appear to make a difference.
What does it mean if nothing is returned?
Not a member of anything
Your articles are really informative and good , Thanks for sharing the commands , Keep up your good work .
Hi I am trying to get a user name with a specific role assigned for e.g. Get-User | Get-ManagementRoleAssignment -Role ‘audit logs’
Ho can I get this working. Please help
soulful resource http://xnxx-love.com
corporate web site http://iqxnxx.com
Six years later and this is the most helpful article I’ve found. Nothing helpful (cmdlet or article wise) from Microsoft
Many thanks for this simple yet evidently necessary post!
Thank you Nick
The command only works for first 1000 entries. We have over 10 K entries where it is not pulling all the roles assigned to an admin. I tried to explore but it appears there is no parameter called resultsize or -All .