Introduction
RBAC is primarily designed for delegating and managing administrative permissions. But in Exchange it's also used to assign self-service permissions to end users. By allowing users to manage some of their own user attributes and even run basic diagnostics on their own mailbox, you can reduce the work of your HelpDesk.
In this module, you'll examine how to manage user roles using built-in role assignment policies and management role assignment policies. You'll also learn how to create new roles, role assignments, and scopes.
Prerequisites
This module is designed for persons who are aspiring to the Microsoft 365 Messaging Administrator role. The prerequisites for this module include:
- Ability to navigate the Microsoft 365 admin center, the Exchange admin center, and the Microsoft Defender portal.
- Ability to create Domain Name System (DNS) records at an intermediate level.
- Familiarity with Active Directory concepts such as centralized domain management, sites, and directory-based identity-related services.
- Ability to write PowerShell commands at an intermediate level.
Learning objectives
After completing this module, you'll be able to:
- Describe the built-in end-user roles.
- Configure role assignment policies.
- Create new custom roles and role assignment policies.