Microsoft Exchange Online roles and permissions
| Role | Permission | Description |
|---|---|---|
| Microsoft Exchange Online Reader
Can read all Exchange Online PowerShell Command Blocks |
command.category.read | Can read all corresponding Command Block categories |
| command.exchange.read | Can read all Exchange Online Command Blocks and jobs | |
| command.exchangeonline.calendar.read | Can read all Microsoft Exchange Online Calendar Command Blocks and jobs | |
| command.exchangeonline.mailfolder.read | Can read all Exchange Online mail folder Command Blocks and jobs | |
| command.exchangeonline.powershell.read | Can read all Exchange Online Powershell Command Blocks and jobs | |
| command.jobs.read | Can read related Command Block jobs | |
| command.read | Can read all related Command Blocks | |
| organization.readbasic | Can read all basic organization properties (list) | |
| report.accesstoken.read | Can read Power BI report access token (list) | |
| report.read | Can read Power BI reports (list) | |
| user.read | Can read all properties of a user (details) | |
| user.readbasic | Can read all basic user properties (list) | |
| Microsoft Exchange Online Writer
Can read and execute all Exchange Online PowerShell Command Blocks |
command.category.read | Can read all corresponding Command Block categories |
| command.exchange.read | Can read all Exchange Online Command Blocks and jobs | |
| command.exchange.write | Can execute all exchange jobs | |
| command.exchangeonline.calendar.read | Can read all Microsoft Exchange Online Calendar Command Blocks and jobs | |
| command.exchangeonline.calendar.write | Can write all Microsoft Exchange Online Calendar Command Blocks and jobs | |
| command.exchangeonline.mailfolder.read | Can read all Exchange Online mail folder Command Blocks and jobs | |
| command.exchangeonline.mailfold.write | Can write all Exchange Online mail folder Command Blocks and jobs | |
| command.exchangeonline.powershell.read | Can read all Exchange Online Powershell Command Blocks and jobs | |
| command.exchangeonline.powershell.write | Can execute all Exchange Online Powershell Command Blocks and jobs | |
| command.jobs.read | Can read related Command Block jobs | |
| command.read | Can read all related Command Blocks | |
| command.schedules.read | Can read all schedules Command Blocks and jobs | |
| command.schedules.write | Can write all schedules Command Blocks and jobs | |
| organization.readbasic | Can read all basic organization properties (list) | |
| report.accesstoken.read | Can read Power BI report access token (list) | |
| report.read | Can read Power BI reports (list) | |
| user.read | Can read all properties of a user (details) | |
| user.readbasic | Can read all basic user properties (list) |
Related articles
Updated: Jan 20, 2025