Remove a role from a user or USG
Applies to: Exchange Server 2013
Topic Last Modified: 2012-10-02
Management role assignments assign a management role to a user or universal security group (USG). If you remove a role assignment, the users assigned the role will no longer have access to the cmdlets available on that role. For more information about management role assignments in Microsoft Exchange Server 2013, see Understanding management role assignments.
Looking for other management tasks related to roles? Check out Advanced permissions.
Estimated time to complete this procedure: 5 minutes
You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Role assignments" entry in the Role management permissions topic.
You must use the Shell to perform these procedures.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.
If you know the name of the role assignment you want to remove, use the following syntax.
Remove-ManagementRoleAssignment <assignment name>
For example, to remove the "Tier 2 Help Desk Assignment" role assignment, use the following command.
Remove-ManagementRoleAssignment "Tier 2 Help Desk Assignment"
If you don't know the name of the role assignment, you can use the following syntax.
Get-ManagementRoleAssignment -RoleAssignee <user or USG> -Role <role name> -Delegating <$true | $false> | Remove-ManagementRoleAssignment
For example, if you want to remove the Mail Recipients regular role assignment from the user davids, use the following command.
Get-ManagementRoleAssignment -RoleAssignee davids -Role "Mail Recipients" -Delegating $false | Remove-ManagementRoleAssignment