Exchange online administration : exploring role groups

Hi All,

Greetings for the day!!!

Today I am sharing short informative article related to Role Groups in Exchange admin center.

What are Role Groups

• A role group is a special universal security group (USG).
• It is part of the Role Based Access Control (RBAC) permissions model in Exchange Online.
• The members of the role group are assigned the same set of roles.
• We add and remove permissions from users by adding them to or removing them from the role group.
• We need to be member of the Organization Management role group in Exchange Online.
• The Role Management role in Exchange Online allows users to view, create, and modify Exchange Online role groups.
• By default, that Role Management role is assigned only to the Organization Management role group.
• A role group makes it easier to assign roles to admins.
• When a role is assigned to a role group, the role grants permissions to the members. All the members of the role group receive these permissions.

How to View / Manage role groups in Exchange Online admin center?

• Navigate to Exchange online admin center
• We can navigate to Exchange admin center by different approaches
  • By directly navigating to Exchange admin center URL – https://admin.exchange.microsoft.com/#/homepage
  • OR from Microsoft 365 admin center
    • We have detailed article to navigate Exchange admin center. Small Tips and Tricks – Exchange admin center – How to navigate to Exchange admin center
• As we navigate to Exchange admin center, we will be on Exchange admin center home

• From the left pane we will navigate to “Roles” section as

• Expand the “Roles” section
• We will navigate to “Admin roles“.
• As we will click on “Admin roles” we will navigate to “Admin roles” page – https://admin.exchange.microsoft.com/#/adminRoles

• As in above image, on “Admin roles” page we have list of OOB roles – name and description
• We have an option to create custom role group – “Copy role group“.
• To delete the selected role group we have delete option- “Delete“. Please refer below image.
• If we click on any of the “Admin role” detailed right pane opens

• On “Admin role” details pane we have details like
  • General information
    • Name of role
    • Description of role and so on
  • Assigned
    • Members of the role
  • Permissions
    • List of roles in role group
  • We have an option to delete the role. “Delete role” button at the bottom of the pane

Have a wonderful day. 

Thanks for reading.