You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Role groups" entry in the Role management permissions topic.
To give a user the permissions that are granted by a role group, you need to add the user, or a universal security group (USG), or another role group that the user is a member of, as a member of the role group.
Use the EAC to add members to a role group
In the Exchange admin center (EAC), navigate to Permissions > Admin Roles.
Select the role group you want to add members to, and then click Edit.
In the Members section, click Add.
Select the users, USGs, or other role groups you want to add to the role group, click Add, and then click OK.
Click Save to save the changes to the role group.
Use the Exchange Management Shell to add members to a role group
To add multiple role group members or to replace the role group membership entirely, see the Examples section in Update-RoleGroupMember.
How do you know this worked?
To verify that you have successfully added one or more members to a role group, do the following:
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you added members to.
In the role group details pane, verify that the members you added are listed.
Remove members from a role group
To remove the permissions granted by a role group from a user, you need to remove the user, or the universal security group (USG) the user is a member of, from the role group's membership.
Use the EAC to remove members from a role group
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you want to remove members from, and then click Edit.
In the Members section, select the members you want to remove, click Remove, and then click Save.
Use the Exchange Management Shell to remove members from a role group
To remove multiple role group members or to replace the role group membership entirely, see the Examples section in Update-RoleGroupMember.
How do you know this worked?
To verify that you have successfully removed one or more members to a role group, do the following:
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you removed members from.
In the role group details pane, verify that the members you removed are no longer listed.
View the members of a role group
The members of a role group are granted the permissions provided by the management roles assigned to the role group. You can view the members of a role group to see which users, universal security groups (USG), or other role groups are granted permissions by the role group you specify.
Use the EAC to view the members of a role group
In the EAC, navigate to Permissions > Admin Roles.
Select the role group you want to view the members of.
In the role group details pane, view the members in the role group details pane.
Use the Exchange Management Shell to view the members of a role group
To view the members of a role group, see the "Examples" section in Get-RoleGroupMember.
This module examines the use of roles and role groups in the Microsoft 365 permission model, including role management, best practices when configuring admin roles, delegating roles, and elevating privileges.
.
.
, and then click Save.