Exchange 2010 RoleBased Access Control Powershell Part 1

 

 

The followingPowershell commands identify how to find the relationship between role groups,management roles and management role entries - cmdlets that make up managementroles.

There are alsoexamples on searching and filtering management roles.

 

For a list of USGRole Groups use the following

get-rolegroup

For a list of  Role Groups and managed Roles associated use

get-rolegroup |select Name, roles |fl

To identifymanagement roles associated to individual Role groups

get-rolegroup-identity " Name " | select roles

This provides afilter to search all rolegroups for a particular management role assigned

get-rolegroup |?{$_.roles -like "management role name"}

This provides a listof management roles available or you can choose from

the results from theget-rolegroup |select roles or run Get-managementrole

To list all cmdletsassociated with a management role use the following

get-managementroleentrymanagementrolename\*

To find which rolegroup has a particular management role assigned use

Get-ManagementRoleAssignment-Identity move* |Select Name,RoleassigneeName

To identify the cmdlets associated with a management group and management role use:
Get-rolegroup - -lists all rolegroups

Get-RoleGroup "dis*" | select roles
Select a particular group and list the roles associated

Get-ManagementRole -identity "disaster*" |Get-ManagementRoleEntry |select Role,name
Break down each of the identified roles, you will have to run it against each of the roles identified in Get-RoleGroup "dis*" | select role,name