Microsoft Exchange Online roles and permissions

Role Permission Description
Microsoft Exchange Online Calendar Reader

Can read all Exchange Online Command Blocks.

command.category.read Can read all corresponding Command Block categories
command.exchangeonline.calendar.read Can read all Microsoft Exchange Online Calendar Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Microsoft Exchange Online Calendar Writer

Can read and execute all Exchange Online Command Blocks.

command.category.read Can read all corresponding Command Block categories
command.exchangeonline.calendar.read Can read all Microsoft Exchange Online Calendar Command Blocks and jobs
command.exchangeonline.calendar.write Can write all Microsoft Exchange Online Calendar Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Microsoft Exchange Online Mail Reader

Can read all Exchange Online Command Blocks.

command.category.read Can read all corresponding Command Block categories
command.exchangeonline.mailfolder.read Can read all Exchange Online mail folder Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Microsoft Exchange Online Mail Writer

Can read and execute all Exchange Online Command Blocks.

command.category.read Can read all corresponding Command Block categories
command.exchangeonline.mailfolder.read Can read all Exchange Online mail folder Command Blocks and jobs
command.exchangeonline.mailfolder.write Can write all Exchange Online mail folder Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Microsoft Exchange Online PowerShell Reader

Can read all Exchange Online PowerShell Command Blocks.

command.category.read Can read all corresponding Command Block categories
command.exchangeonline.powershell.read Can read all Exchange Online Powershell Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)
Microsoft Exchange Online PowerShell Writer

Can read and execute all Exchange Online PowerShell Command Blocks.

command.category.read Can read all corresponding Command Block categories
command.exchangeonline.powershell.read Can read all Exchange Online Powershell Command Blocks and jobs
command.exchangeonline.powershell.write Can execute all Exchange Online Powershell Command Blocks and jobs
command.jobs.read Can read related Command Block jobs
command.read Can read all related Command Blocks
organization.readbasic Can read all basic organization properties (list)
report.accesstoken.read Can read Power BI report access token (list)
report.read Can read Power BI reports (list)
user.read Can read all properties of a user (details)
user.readbasic Can read all basic user properties (list)

Related articles

Updated: Feb 29, 2024