Background
Have you ever wanted to discover permissions that have been allocated to administrators in Exchange or Exchange Online? If you answered yes, this article will show you how to use the Get-ManagementRoleAssignment cmdlet.
Solution
Using Get-ManagementRoleAssignment cmdlet, all of the management role assignments within Exchange or Exchange Online are returned.
To return the permissions that have been allocated to specific administrators or end-users, add the GetEffectiveUsers parameter to your cmdlet. When executed, the cmdlet shows who has permissions (EffectiveUserName column), roles that have been assigned (roles column), and role type (RoleAssigneeType column).
To limit the output, add the where-object or ? to your cmdlet.
If you want to see users that have access to specific roles, add the role parameter to the Get- ManagementRoleAssignment cmdlet.
