Remove a role from a user or USG

Applies to: Exchange Server 2013

Management role assignments assign a management role to a user or universal security group (USG). If you remove a role assignment, the users assigned the role will no longer have access to the cmdlets available on that role. For more information about management role assignments in Microsoft Exchange Server 2013, see Understanding management role assignments.

Looking for other management tasks related to roles? Check out Advanced permissions.

What do you need to know before you begin?

  • Estimated time to complete this procedure: 5 minutes

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Role assignments" entry in the Role management permissions topic.

  • You must use the Shell to perform these procedures.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.


Having problems? Ask for help in the Exchange forums. Visit the forums at Exchange Server.

Remove a management role assignment

If you know the name of the role assignment you want to remove, use the following syntax.

Remove-ManagementRoleAssignment <assignment name>

For example, to remove the "Tier 2 Help Desk Assignment" role assignment, use the following command.

Remove-ManagementRoleAssignment "Tier 2 Help Desk Assignment"

If you don't know the name of the role assignment, you can use the following syntax.

Get-ManagementRoleAssignment -RoleAssignee <user or USG> -Role <role name> -Delegating <$true | $false> | Remove-ManagementRoleAssignment

For example, if you want to remove the Mail Recipients regular role assignment from the user davids, use the following command.

Get-ManagementRoleAssignment -RoleAssignee davids -Role "Mail Recipients" -Delegating $false | Remove-ManagementRoleAssignment