Entra Roles mapping to Exchange RoleGroups
References:
| Entra role | Entra Description | Exchange role group | Exchange Description |
|---|---|---|---|
| Exchange Administrator | Can manage all aspects of the Exchange product. | Organization Management{target="blank"}, ExchangeServiceAdmins-<unique value> |
Manage all aspects of Exchange Online |
| Exchange Recipient Administrator | Can create or update Exchange Online recipients within the Exchange Online organization. | Recipient Management | Create and delete all recipients, and read and update all properties of recipients in Exchange Online, Manage all tasks related to migration of recipients in Exchange Online |
| Compliance Administrator | Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365. | Compliance Management{target="blank"}, ComplianceAdmins<unique value> |
Manage all aspects of Office 365 Compliance Manager |
| Compliance Data Administrator | Creates and manages compliance content. | N/A | Manage all aspects of Office 365 Compliance Manager |
| Global Administrator | Can manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities. | Organization Management{target="blank"}, TenantAdmins-<unique value> |
Manage all aspects of Exchange Online |
| Global Reader | Can read everything that a Global Administrator can, but not update anything. | View-Only Organization Management{target="blank"}, GlobalReaders-<unique value> |
N/A |
| Helpdesk Administrator | Can reset passwords for non-administrators and Helpdesk Administrators. | Help Desk | N/A |
| N/A | N/A | RIM-MailboxAdmins<GUID> |
ApplicationImpersonation |