Forum Discussion
Access Exchange online Via Powershell permission only Org. Admin ?Global Admin?
Hello ,
Because I had programmed a task schedule for export Get-MsolUse, i Using my Global Admin permission is ok, but using a personal account is not good for this because when I leave the company the task schedule will not work!
So I want to create an account, for security reasons I don't want to add much permission for it.
but I had tried much View permission is not work, Is it only Org. Admin or Global Admin can access Exchange online Via Powershell?
3 Replies
Everyone can access PowerShell, but most cmdlets wont be exposed unless the user has the required role. In Exchange Online, you can get very granular with the permissions, down to individual cmdlets. However, the example you gave, Get-MsolUser, is NOT an Exchange Online cmdlet, but part of the MSOnline mode. For that, you don't have that much customizability.
if I use Get-Mailbox need which permission? because I use this account of the automation task scheduler, so I don't want the account had much permission
because I can't make sure ConvertFrom-SecureString is Secure
To find out which role contains a specific cmdlet, you can use Get-ManagementRole. In this case, if all you need is Get-Mailbox, you can either use the built-in "View-Only Recipients" role, or create a custom one.
