You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Assignment policies" entry in the Role Management Permissions topic.
You can use the Get-ManagementRoleAssignment cmdlet to view the list of roles assigned to an assignment policy.
To find the names of the assignment policies in your organization, use the following command.
Find the name of the assignment policy whose roles you want to list.
To list the roles on an assignment policy, use the following syntax.Get-ManagementRoleAssignment -RoleAssignee <assignment policy name>
This example lists all of the roles assigned to the Default Role Assignment Policy assignment policy.
For detailed syntax and parameter information, see Get-RoleAssignmentPolicy or Get-ManagementRoleAssignment.
To view a list of role assignments that use a specific custom scope, you need to first determine whether the scope is a recipient scope, configuration scope, exclusive recipient scope, or exclusive configuration scope. Each type of scope uses a different parameter on the Get-ManagementRoleAssignment cmdlet. The following lists each scope and its associated parameter:
Exclusive recipient scopesExclusiveRecipientWriteScope
Exclusive configuration scopesExclusiveConfigWriteScope
The syntax for each parameter is the same. Specify the name of the scope with the parameter that matches the type of scope it is.
This example retrieves all of the role assignments that use the Vancouver Recipients recipient scope.
This example retrieves all of the role assignments that use the Seattle AD Site exclusive configuration scope.
For detailed syntax and parameter information, see Get-ManagementRoleAssignment.