Forum Discussion
Exchange Online eDiscovery Transitioning to Office 365 Security & Compliance Center - Permissions
You can add groups, via PowerShell:
# Get-CRoleGroupMember -Identity "Supervisory Review"
Name RecipientType
---- -------------
Vasil Michev MailUser
# Add-CRoleGroupMember -Identity "Supervisory Review" -Member secgrp
# Get-CRoleGroupMember -Identity "Supervisory Review"
Name RecipientType
---- -------------
Vasil Michev MailUser
secgrp MailUniversalSecurityGroup
On the second question, the answer is no, at least last time we asked this they had no plans of doing anything similar. Old searches will remain in ExO, you simply wont be able to create new ones.
However I was looking to add a sec grp only to the "eDiscovery Administrator" grp which is a sub role within the eDiscoveryManager role group.
Don't see the "eDiscovery Administrator" role group listed when I pipe my get-rolegroup
Name
----
Reviewer
TenantAdmins
SecurityAdministrator
OrganizationManagement
HelpdeskAdmins
SupervisoryReview
ComplianceAdministrator
SecurityReader
eDiscoveryManager
UserAccountAdmins
ServiceAssuranceUser
I was able to add a grp to the eDiscoveryManager role but was unable to find the "eDiscovery Administrator.
- VasilMichevMar 08, 2017MVP
Not sure on that part, I think it's a different role assignment, however the relevant cmdlets are not available for the Protection center PowerShell...
- VasilMichevApr 13, 2017MVP
Finally got some time to look at this. So, this is the situation: you can use the Add-RoleGroupMember cmdlet to add users to the Role Group, as you would do in Exchange, this makes them eDiscovery Managers. To make a user eDiscovery Admin, you need to use the Add-CeDiscoveryCaseAdmin cmdlet. This is not tied in to specific eDiscovery case, he will have Admin access to all eDiscovery cases.
The cmdlet is really easy to use:
Add-CeDiscoveryCaseAdmin -User vasil
where "C" is the prefix I use for the SCC cmdlets.