Microsoft Exchange Online roles and permissions
Cloud Commander end of life (EOL)
Cloud Commander will be decommissioned and stop functioning on May 13, 2026. You can use the product until that date.
Review and update workflows to remove any dependencies before the product is decommissioned.
Support, bug fixes, and security patches will be available until April 13, 2026.
| Role | Permission | Description |
|---|---|---|
| Microsoft Exchange Online Reader
Can read all Exchange Online PowerShell Command Blocks |
command.category.read | Can read all corresponding Command Block categories |
| command.exchange.read | Can read all Exchange Online Command Blocks and jobs | |
| command.exchangeonline.calendar.read | Can read all Microsoft Exchange Online Calendar Command Blocks and jobs | |
| command.exchangeonline.mailfolder.read | Can read all Exchange Online mail folder Command Blocks and jobs | |
| command.exchangeonline.powershell.read | Can read all Exchange Online Powershell Command Blocks and jobs | |
| command.jobs.read | Can read related Command Block jobs | |
| command.read | Can read all related Command Blocks | |
| organization.readbasic | Can read all basic organization properties (list) | |
| report.accesstoken.read | Can read Power BI report access token (list) | |
| report.read | Can read Power BI reports (list) | |
| user.read | Can read all properties of a user (details) | |
| user.readbasic | Can read all basic user properties (list) | |
| Microsoft Exchange Online Writer
Can read and execute all Exchange Online PowerShell Command Blocks |
command.category.read | Can read all corresponding Command Block categories |
| command.exchange.read | Can read all Exchange Online Command Blocks and jobs | |
| command.exchange.write | Can execute all exchange jobs | |
| command.exchangeonline.calendar.read | Can read all Microsoft Exchange Online Calendar Command Blocks and jobs | |
| command.exchangeonline.calendar.write | Can write all Microsoft Exchange Online Calendar Command Blocks and jobs | |
| command.exchangeonline.mailfolder.read | Can read all Exchange Online mail folder Command Blocks and jobs | |
| command.exchangeonline.mailfold.write | Can write all Exchange Online mail folder Command Blocks and jobs | |
| command.exchangeonline.powershell.read | Can read all Exchange Online Powershell Command Blocks and jobs | |
| command.exchangeonline.powershell.write | Can execute all Exchange Online Powershell Command Blocks and jobs | |
| command.jobs.read | Can read related Command Block jobs | |
| command.read | Can read all related Command Blocks | |
| command.schedules.read | Can read all schedules Command Blocks and jobs | |
| command.schedules.write | Can write all schedules Command Blocks and jobs | |
| organization.readbasic | Can read all basic organization properties (list) | |
| report.accesstoken.read | Can read Power BI report access token (list) | |
| report.read | Can read Power BI reports (list) | |
| user.read | Can read all properties of a user (details) | |
| user.readbasic | Can read all basic user properties (list) |
Related articles
Updated: Jan 09, 2026