Share via


User Roles Tab

Applies to: Office 365 for enterprises, Live@edu

On the User Roles tab, you can manage built-in or custom role assignment policies for your organization. A role assignment policy is a collection of one or more end-user management roles that enable users to manage themselves. Management roles are part of the role based access control (RBAC) permissions model. A management role defines what someone has access to and what tasks they can perform.

End-user management roles allow users to perform specific self-management tasks. The combination of all roles assigned to a role assignment policy defines everything that users can configure and manage. For example, a role assignment policy can allow users to configure their mailbox settings, the groups that they own, and their profile information that's displayed in the address book.

Note   In Live@edu organizations, you can't create or delete role assignment policies, and you can't assign a role assignment policy directly to a user. Instead, you assign a mailbox plan to the mailbox, and the role assignment policy that's associated with the mailbox plan is assigned to the user. For more information, see Mailbox Plans.

  • New
    This option isn't available in Live@edu organizations.

    To create a new role assignment policy, click New.

  • Details
    To view the settings of an existing role assignment policy, select it from the list. The settings appear in the details pane. To modify a role assignment policy, select it from the list and click Details.
  • Delete
    This option isn't available in Live@edu organizations.

    To delete an existing role assignment policy, click Delete.

  • Refresh
    To refresh the list of role assignment policies, click Refresh.

Detailed information about a specific role assignment policy

The details pane shows more information about the selected role assignment policy. You'll see the description of the role assignment policy, the end-user roles that are assigned to the role assignment policy, and a description of each end-user role.