Forum Discussion
Exchange Online: Default Role Assignment Policy
Hello! I need a small help. I created the "MyBaseOptions-DisableForwarding" on the Default Role Assignment Policy. I would like to remove that change from the Default Role Assignment Policy ...
If you only used the New-ManagementRole cmdlet, the role is not "added" anywhere. You can check its current assignments via:
Get-ManagementRoleAssignment -Role MyBaseOptions-DisableForwarding
If needed, remove any existing assignment via:
Remove-ManagementRoleAssignment "Name value you obtained from the above cmdlet"
Get-ManagementRoleAssignment -Role MyBaseOptions-DisableForwarding
If needed, remove any existing assignment via:
Remove-ManagementRoleAssignment "Name value you obtained from the above cmdlet"
Thanks for your reply Vasil!
I ran the Get-ManagementRoleAssignment -Role "MyBaseOptions-DisableForwarding" and nothing came back, however I can see it under the Default Role Assignment Policy as an option to seelct or unselect under the MyBaseOptions. Is there any way I can remove it from there or restore the Default Role Assignment Policy to original state (out of the box)?
I ran the Get-ManagementRoleAssignment -Role "MyBaseOptions-DisableForwarding" and nothing came back, however I can see it under the Default Role Assignment Policy as an option to seelct or unselect under the MyBaseOptions. Is there any way I can remove it from there or restore the Default Role Assignment Policy to original state (out of the box)?
- That's the actual Role entry, not a role assignment. Selecting it therein will create an assignment. To remove it from there, you need to delete the Role itself.
VasilMichev What are the implications of removing the default role?
- You cannot remove default roles. You can remove a role assignment for a default role, via the Remove-ManagementRoleAssignment cmdlet.
