Zum Inhalt

Entra Roles to Exchange RoleGroups

Microsoft Entra built-in roles

Entra role Entra Description Exchange role group Exchange Description
Exchange Administrator Can manage all aspects of the Exchange product. Organization Management{target="blank"}, ExchangeServiceAdmins-<unique value> Manage all aspects of Exchange Online
Exchange Recipient Administrator Can create or update Exchange Online recipients within the Exchange Online organization. Recipient Management Create and delete all recipients, and read and update all properties of recipients in Exchange Online, Manage all tasks related to migration of recipients in Exchange Online
Compliance Administrator Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365. N/A, ComplianceAdmins_<unique value> Manage all aspects of Office 365 Compliance Manager
Compliance Data Administrator Creates and manages compliance content. N/A Manage all aspects of Office 365 Compliance Manager
Global Administrator Can manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities. Organization Management{target="blank"}, TenantAdmins-<unique value> Manage all aspects of Exchange Online
Global Reader Can read everything that a Global Administrator can, but not update anything. View-Only Organization Management{target="blank"}, GlobalReaders-<unique value> N/A
Helpdesk Administrator Can reset passwords for non-administrators and Helpdesk Administrators. Help Desk N/A
N/A N/A RIM-MailboxAdmins<GUID> ApplicationImpersonation