Forum Discussion
Limit litigation hold permissions to specific users
Hi All, ive been asked to find out how we can remove litigation hold permissions from most of the users in the "Organization Management" role. This role has wide ranging powers that are used oper...
rdoleman You cannot edit or change permissions subsets for a builtin Role in Exchange like Organization Management.
Better is to create a Custom Role Group with defined permissions, example for Service Desk you wont want to give all Recipient Management permissions and similary for Exchange admin ( there would be different Skill set or levels like L1/L2/L3 ).
Read about what the Role Groups subset functions and what purpose they fulfill and then based on that create your Custom Role Groups for different IT Teams in your organization.
Must Read - Get-RoleGroup & Get-RoleassignmentPolicy for exchange specific . also note RoleGroup is different from MSOLRoles (Get-msolrole )
Cheers !
Ankit Shukla