Exchange Online (Office365) and RBAC?

Oh yes Glimlach It is perfectly possible to create and assign custom roles within Exchange Online. In this example I will create a custom role which, one assigned to a user, will enable that user to change all its user settings, except for its own street address.

Step1. Sign-In as our demo user and check the default permissions

By default, every user has permission to change quite a few of its own settings, like the street address




Step 2. Create a new custom role

First, we need to find out which roles include the ability of changing the value of StreetAddress. This is easy to do using the Exchange Management Shell Glimlach

Get-ManagementRole | Where {$_.RoleEntries –ilike “*streetaddress*”}


Get-ManagementRoleEntry “x\set-user” | where { {$_.parameters –ilike “*streetaddress*"} | fl role,name,parameters


Running the below enables me to find out that the reason DemoUs kan change its streetaddress, is the fact that he has been assigned the Default Role Assignment Policy

Get-ManagementRoleAssignment | where {$_.roleassigneename –ilike “Default Role Assignment*”} | ft roleassignee,role


First I’ll create a new role “No Street Employees”:

New-ManagementRole “No Street Employees” –Parent MyContactInformation

Followed by the creation of a new RoleAssignmentPolicy “No Street Employees” running:

New-RoleAssignmentPolicy “No Street Employees”


To which I’ll add all roles, using the cmdlet New-ManagementRoleAssignment –Role <role> –Policy “No Street Employees”,

including the roles myvoicemail,no street employees,mytextmessaging,mydistributiongroupmembership, and my baseoptions.


Then it is time to remove the parameter StreetAddress from the role No Street Employees, and this is done by running the following single line:

Set-ManagementRoleEntry “No Street Employees\Set-User” –Parameters StreetAddress –RemoveParameter


Then it’s time to assign the policy to the user DemoUs, using the shell…

Get-Mailbox demous | Set-Mailbox –RoleAssignmentPolicy “No Street Employees”


Step 3. Time to test

Once DemoUs logs in, the user is not able anymore to change the value of its StreetAddress, as planned Glimlach


RBAC = The Best Way To Control Your Exchange Environment, On Prem &/or Online!!!



Comments (1)

  1. show box says:

    Thanks for the great info. I really loved this. I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?
    For more info on showbox please refer below sites:
    Latest version of Showbox App download for all android smart phones and tablets. – It’s just 2 MB file you can easily get it on your android device without much trouble. Showbox app was well designed application for android to watch movies and TV shows, Cartoons and many more such things on your smartphone.
    For showbox on iOS (iPhone/iPad), please read below articles:
    Showbox for PC articles:
    There are countless for PC clients as it is essentially easy to understand, simple to introduce, gives continuous administration, effectively reasonable. it is accessible at completely free of expense i.e., there will be no establishment charges and after establishment
    it doesn’t charge cash for watching films and recordings. Not simply watching, it likewise offers alternative to download recordings and motion pictures. The accompanying are the strides that are to be taken after to introduce Showbox application on Android. The above
    all else thing to be done is, go to the Security Settings on your Android telephone, Scroll down and tap on ‘Obscure sources’.
    Movie Box, an esteemed movies application in which you can find stacks of programs and films. The guide is given here to download Movie Box app to Android and to Apple iOS 9.0.2, iOS 8.4/8.3 and also for the lower versions without Jailbreak.
    Please do login to Showbox application with the help of Ymail. You can login in Ymail from here –
    Sign Up & Do registration for latest movies on Showbox application