Struggling to determine which roles a user has access to? Look no further! With this PowerShell command, you can easily identify the Exchange Role based access groups in which a user is assigned roles.
This cmdlet is available in on-premises Exchange and in the cloud-based service
Simply replace “Username” with the mailbox’s Alias and run the following command:
Get-ManagementRoleAssignment -GetEffectiveUsers | Where-Object {$_.EffectiveUserName -eq “Username”} | select-object Role
For a comprehensive list of roles assigned to a specific user, use this command instead, replacing <UserIdentity> with the user’s name, alias, or email address:
Get-ManagementRoleAssignment -RoleAssignee <UserIdentity> -Delegating $false | Format-Table -Auto Role,RoleAssigneeName,RoleAssigneeType
Find the members of a role group
Get-RoleGroupMember “<Role group name>”
Never waste time again trying to identify a user’s assigned roles in Exchange Role based access groups.
