Permissions based RBAC - Exchange Online

[Thomas Cezario]

Hi,

I need to create a specific role so that a user can only access the "Protection" part of the EAC (Office 365). As the image below.

I researched some things related to RBAC permissions, but I could not understand and apply the configuration via PowerShell.

Tks.

[#2]

Grant them the "Transport Hygiene" role, either directly or via the "Hygiene Management" Role Group.

[#3]

Hi Vasil,

I had applied this permission, but the user still continues to view the other functions. So I was confused, if I needed to create a specific RBAC function.

[#4]

Some other tabs/functions will always be available, unless you decide to create a custom role and get veeeeery granular with the cmdlets/parameters in it.

[#5]

That's exactly what I'd like to create. But I could not understand the process of creating this permission.

[#6 · Accepted solution]

Well, the RBAC model takes some getting used to. I dont have any example that deals with this specific scenario, however there are numerous articles out there explaining how you can create a custom Role. For example, this one that gives the users only access to the device Wipe functionality: https://blogs.technet.microsoft.com/exchange/2012/09/12/rbac-walkthrough-of-creating-a-role-that-can...

[#7]

Thank you Vasil. I'll use it as an example.