{"id":1676,"date":"2011-12-15T12:05:00","date_gmt":"2011-12-15T17:05:00","guid":{"rendered":"http:\/\/www.bhargavs.com\/?p=377"},"modified":"2011-12-15T12:05:00","modified_gmt":"2011-12-15T17:05:00","slug":"rbac-and-principle-of-least-privilege","status":"publish","type":"post","link":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/","title":{"rendered":"RBAC and Principle of Least Privilege"},"content":{"rendered":"<p>Exchange 2010 introduced RBAC as a mechanism to manage access to administrative tasks at granular level which was not possible in previous versions of Exchange.<\/p>\n<p>While you may know how to use RBAC to create custom roles that maps to job functions in your environment, one particular feature tends to get easily overlooked, mostly because it is least understood I believe. It is Unscoped Top Level Management Roles.<\/p>\n<p>So, I wrote a blog post on it detailing what it is, and how to configure it. It went live few days ago at <a href=\"http:\/\/blogs.technet.com\/b\/heyscriptingguy\/\" target=\"_blank\" rel=\"noopener noreferrer\">Hey, Scripting Guy! blog<\/a>.<\/p>\n<p>You can read complete article here &#8211; <a title=\"http:\/\/blogs.technet.com\/b\/heyscriptingguy\/archive\/2012\/01\/13\/use-powershell-and-rbac-to-control-access-to-exchange-server-cmdlets.aspx\" href=\"http:\/\/blogs.technet.com\/b\/heyscriptingguy\/archive\/2012\/01\/13\/use-powershell-and-rbac-to-control-access-to-exchange-server-cmdlets.aspx\">http:\/\/blogs.technet.com\/b\/heyscriptingguy\/archive\/2012\/01\/13\/use-powershell-and-rbac-to-control-access-to-exchange-server-cmdlets.aspx<\/a><\/p>\n<p>Enjoy!<\/p>\n<p>Originally posted at http:\/\/blogs.technet.com\/bshukla<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Exchange 2010 introduced RBAC as a mechanism to manage access to administrative tasks at granular level which was not possible in previous versions of Exchange. While you may know how [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pgc_sgb_lightbox_settings":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[52,19],"tags":[],"class_list":["post-1676","post","type-post","status-publish","format-standard","hentry","category-exchange-2010","category-powershell"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>RBAC and Principle of Least Privilege - Bhargav&#039;s IT Playground<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RBAC and Principle of Least Privilege - Bhargav&#039;s IT Playground\" \/>\n<meta property=\"og:description\" content=\"Exchange 2010 introduced RBAC as a mechanism to manage access to administrative tasks at granular level which was not possible in previous versions of Exchange. While you may know how [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/\" \/>\n<meta property=\"og:site_name\" content=\"Bhargav&#039;s IT Playground\" \/>\n<meta property=\"article:published_time\" content=\"2011-12-15T17:05:00+00:00\" \/>\n<meta name=\"author\" content=\"Bhargav\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bhargav\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/\"},\"author\":{\"name\":\"Bhargav\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"headline\":\"RBAC and Principle of Least Privilege\",\"datePublished\":\"2011-12-15T17:05:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/\"},\"wordCount\":126,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"articleSection\":[\"Exchange 2010\",\"PowerShell\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/\",\"name\":\"RBAC and Principle of Least Privilege - Bhargav&#039;s IT Playground\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#website\"},\"datePublished\":\"2011-12-15T17:05:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2011\\\/12\\\/15\\\/rbac-and-principle-of-least-privilege\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/bhargavs.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"RBAC and Principle of Least Privilege\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#website\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/\",\"name\":\"Bhargav's IT Playground\",\"description\":\"Passion for Technology. Power of Collaboration.\",\"publisher\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/bhargavs.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\",\"name\":\"Bhargav\",\"logo\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/bhargavs.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"RBAC and Principle of Least Privilege - Bhargav&#039;s IT Playground","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/","og_locale":"en_US","og_type":"article","og_title":"RBAC and Principle of Least Privilege - Bhargav&#039;s IT Playground","og_description":"Exchange 2010 introduced RBAC as a mechanism to manage access to administrative tasks at granular level which was not possible in previous versions of Exchange. While you may know how [&hellip;]","og_url":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/","og_site_name":"Bhargav&#039;s IT Playground","article_published_time":"2011-12-15T17:05:00+00:00","author":"Bhargav","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Bhargav","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/#article","isPartOf":{"@id":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/"},"author":{"name":"Bhargav","@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"headline":"RBAC and Principle of Least Privilege","datePublished":"2011-12-15T17:05:00+00:00","mainEntityOfPage":{"@id":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/"},"wordCount":126,"commentCount":0,"publisher":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"articleSection":["Exchange 2010","PowerShell"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/","url":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/","name":"RBAC and Principle of Least Privilege - Bhargav&#039;s IT Playground","isPartOf":{"@id":"https:\/\/bhargavs.com\/#website"},"datePublished":"2011-12-15T17:05:00+00:00","breadcrumb":{"@id":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/bhargavs.com\/index.php\/2011\/12\/15\/rbac-and-principle-of-least-privilege\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/bhargavs.com\/"},{"@type":"ListItem","position":2,"name":"RBAC and Principle of Least Privilege"}]},{"@type":"WebSite","@id":"https:\/\/bhargavs.com\/#website","url":"https:\/\/bhargavs.com\/","name":"Bhargav's IT Playground","description":"Passion for Technology. Power of Collaboration.","publisher":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/bhargavs.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26","name":"Bhargav","logo":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/bhargavs.com"]}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1670,"url":"https:\/\/bhargavs.com\/index.php\/2011\/08\/22\/microsoft-exchange-2010-powershell-cookbook-review\/","url_meta":{"origin":1676,"position":0},"title":"Microsoft Exchange 2010 PowerShell Cookbook Review","author":"Bhargav","date":"August 22, 2011","format":false,"excerpt":"Disclaimer: I am not paid to write about this book and the review written here is my own view. I was recently contacted by Packt Publishing about their recently published book \u201cMicrosoft Exchange 2010 PowerShell Cookbook\u201d. I have voluntarily reviewed books in the past (i.e. Windows Server 2003 Security: A\u2026","rel":"","context":"In &quot;Exchange 2010&quot;","block_context":{"text":"Exchange 2010","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/exchange-server\/exchange-2010\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1638,"url":"https:\/\/bhargavs.com\/index.php\/2009\/11\/09\/exchange-2010-new-and-improved-features\/","url_meta":{"origin":1676,"position":1},"title":"Exchange 2010 New and Improved Features","author":"Bhargav","date":"November 9, 2009","format":false,"excerpt":"Exchange Server 2010 comes with host of new features and improved functionality that makes the product even better. In this post, I am going to list new and improved features. In interest of keeping the post manageable, I have included lot more details in attached word file. Attached Excel file\u2026","rel":"","context":"In &quot;Exchange 2010&quot;","block_context":{"text":"Exchange 2010","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/exchange-server\/exchange-2010\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1672,"url":"https:\/\/bhargavs.com\/index.php\/2011\/09\/27\/mythbusters-exchange-server-2010-and-powershell-remoting\/","url_meta":{"origin":1676,"position":2},"title":"Mythbusters\u2013Exchange Server 2010 and PowerShell Remoting","author":"Bhargav","date":"September 27, 2011","format":false,"excerpt":"A misconception that WinRM listener needs to be configured in order to be able to connect to Exchange Server 2010 had popped up a couple times in my conversations recently so I decided to clear the confusion. Guest blogging for my friends at IT Pro Africa, I have written the\u2026","rel":"","context":"In &quot;Exchange 2010&quot;","block_context":{"text":"Exchange 2010","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/exchange-server\/exchange-2010\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1632,"url":"https:\/\/bhargavs.com\/index.php\/2009\/08\/17\/exchange-2007-powershell-scripts\/","url_meta":{"origin":1676,"position":3},"title":"Exchange 2007 PowerShell Scripts \u2013 What would you like to script?","author":"Bhargav","date":"August 17, 2009","format":false,"excerpt":"I am always thinking about how can I script\/automate tasks I have to do repeatedly or I see others ask for. I would like to go a step beyond. I would like to ask you \u2013 the readers: If you would want to script something for your Exchange 2007 environment,\u2026","rel":"","context":"In &quot;Announcements&quot;","block_context":{"text":"Announcements","link":"https:\/\/bhargavs.com\/index.php\/category\/announcements\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1627,"url":"https:\/\/bhargavs.com\/index.php\/2009\/06\/12\/check-exchange-2003-vitals-powershell\/","url_meta":{"origin":1676,"position":4},"title":"Check Exchange 2003 vitals with PowerShell \u2013 Part II","author":"Bhargav","date":"June 12, 2009","format":false,"excerpt":"In continuation to my previous post \u201cCheck Exchange 2003 vitals with PowerShell\u201d, I also have a code block that you can replace if you want to query all exchange servers in your environment dynamically with script instead of using text file as in the code I posted earlier. In the\u2026","rel":"","context":"In &quot;Exchange 2003&quot;","block_context":{"text":"Exchange 2003","link":"https:\/\/bhargavs.com\/index.php\/category\/microsoft\/exchange-server\/exchange-2003\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1701,"url":"https:\/\/bhargavs.com\/index.php\/2013\/08\/30\/book-review-microsoft-exchange-server-2013-powershell-cookbook-second-edition\/","url_meta":{"origin":1676,"position":5},"title":"Book Review &#8211; Microsoft Exchange Server 2013 PowerShell Cookbook (Second Edition)","author":"Bhargav","date":"August 30, 2013","format":false,"excerpt":"Among other books that I have reviewed in past, I had pleasure reviewing Mike\u2019s \u201cMicrosoft Exchange 2010 PowerShell Cookbook\u201d when it was release in 2011. So, when PACKT Publishing asked me if I would be interested in reviewing his new book \u201cMicrosoft Exchange Server 2013 PowerShell Cookbook: Second Edition\u201d, I\u2026","rel":"","context":"In &quot;Book Review&quot;","block_context":{"text":"Book Review","link":"https:\/\/bhargavs.com\/index.php\/category\/book-review\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_shortlink":"https:\/\/wp.me\/pkROc-r2","_links":{"self":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts\/1676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/comments?post=1676"}],"version-history":[{"count":0,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts\/1676\/revisions"}],"wp:attachment":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/media?parent=1676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/categories?post=1676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/tags?post=1676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}