diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index d48febf9a..68a6e040f 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -3,7 +3,7 @@ { "name": "Python 3", // Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile - "image": "mcr.microsoft.com/devcontainers/python:1-3.12-bullseye@sha256:f5fb6c95c669b17015b1bb90f3dcdb98d86a89a7a257f53054838a3e3df398d2" + "image": "mcr.microsoft.com/devcontainers/python:1-3.12-bullseye@sha256:d11de141ce017da425c9c1f97527fa864e5d84077dba81ea0bb6ef5399064d30" // Features to add to the dev container. More info: https://containers.dev/features. // "features": {}, diff --git a/RoleDefinitions/05ac6fd6-16d7-431a-8f3b-3333014c33d0.json b/RoleDefinitions/05ac6fd6-16d7-431a-8f3b-3333014c33d0.json new file mode 100644 index 000000000..600e13799 --- /dev/null +++ b/RoleDefinitions/05ac6fd6-16d7-431a-8f3b-3333014c33d0.json @@ -0,0 +1,33 @@ +{ + "id": "05ac6fd6-16d7-431a-8f3b-3333014c33d0", + "description": "This role enables administrators to configure whether individual public folders are mail-enabled or mail-disabled in an organization.\r\nThis role type enables you to manage the e-mail properties of public folders only. It doesn't enable you to manage non-e-mail properties of public folders. To manage non-e-mail properties of public folders you need to be assigned a role that's associated with the PublicFolders role type.", + "displayName": "Mail Enabled Public Folders", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailPublicFolder -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -IncludeGrantSendOnBehalfToWithDisplayNames -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailPublicFolder -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -Alias -BypassModerationFromSendersOrMembers -Confirm -Contacts -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DeliverToMailboxAndForward -DisplayName -EmailAddresses -EmailAddressPolicyEnabled -EntryId -ErrorAction -ErrorVariable -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ExternalEmailAddress -ForwardingAddress -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -Identity -IgnoreDefaultScope -IgnoreMissingFolderLink -MailTip -MailTipTranslations -MaxReceiveSize -MaxSendSize -ModeratedBy -ModerationEnabled -Name -OnPremisesObjectId -OutBuffer -OutVariable -PhoneticDisplayName -PrimarySmtpAddress -PublicFolderType -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -RequireSenderAuthenticationEnabled -SendModerationNotifications -SimpleDisplayName -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SyncMailPublicFolder -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SyncMailPublicFolder -AcceptMessagesOnlyFrom -Alias -Confirm -Contacts -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DeliverToMailboxAndForward -DisplayName -EmailAddresses -EntryId -ErrorAction -ErrorVariable -ExternalEmailAddress -ForwardingAddress -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -MaxReceiveSize -MaxSendSize -Name -OnPremisesObjectId -OutBuffer -OutVariable -OverrideRecipientQuotas -RejectMessagesFrom -RequireSenderAuthenticationEnabled -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-Mailbox -HoldForMigration -IsExcludedFromServingHierarchy -Name -PublicFolder -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Filter -Identity -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-MailPublicFolder -Confirm -ErrorAction -ErrorVariable -HiddenFromAddressListsEnabled -Identity -OutBuffer -OutVariable -OverrideRecipientQuotas -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-MailPublicFolder -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/099f8485-1ebc-4b44-a41d-b986e543495c.json b/RoleDefinitions/099f8485-1ebc-4b44-a41d-b986e543495c.json new file mode 100644 index 000000000..f7b703db0 --- /dev/null +++ b/RoleDefinitions/099f8485-1ebc-4b44-a41d-b986e543495c.json @@ -0,0 +1,35 @@ +{ + "id": "099f8485-1ebc-4b44-a41d-b986e543495c", + "description": "This role enables administrators to manage address lists, global address lists, and offline address lists in an organization.", + "displayName": "Address Lists", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-GenericSubstrateRecipient -Confirm", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OfflineAddressBook -AddressLists -ApplyMandatoryProperties -ConfiguredAttributes -Confirm -DiffRetentionPeriod -ErrorAction -ErrorVariable -FullOabDownloadPreventionThreshold -Identity -IsDefault -Name -OutBuffer -OutVariable -Schedule -UpgradeFromE14 -UseDefaultAttributes -Versions -WarningAction -WarningVariable -WhatIf -ZipOabFilesBeforeUploading", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-GlobalAddressList -ConditionalCompany -ConditionalCustomAttribute1 -ConditionalCustomAttribute10 -ConditionalCustomAttribute11 -ConditionalCustomAttribute12 -ConditionalCustomAttribute13 -ConditionalCustomAttribute14 -ConditionalCustomAttribute15 -ConditionalCustomAttribute2 -ConditionalCustomAttribute3 -ConditionalCustomAttribute4 -ConditionalCustomAttribute5 -ConditionalCustomAttribute6 -ConditionalCustomAttribute7 -ConditionalCustomAttribute8 -ConditionalCustomAttribute9 -ConditionalDepartment -ConditionalStateOrProvince -Confirm -ErrorAction -ErrorVariable -Identity -IncludedRecipients -Name -OutBuffer -OutVariable -RecipientFilter -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AddressList -ConditionalCompany -ConditionalCustomAttribute1 -ConditionalCustomAttribute10 -ConditionalCustomAttribute11 -ConditionalCustomAttribute12 -ConditionalCustomAttribute13 -ConditionalCustomAttribute14 -ConditionalCustomAttribute15 -ConditionalCustomAttribute2 -ConditionalCustomAttribute3 -ConditionalCustomAttribute4 -ConditionalCustomAttribute5 -ConditionalCustomAttribute6 -ConditionalCustomAttribute7 -ConditionalCustomAttribute8 -ConditionalCustomAttribute9 -ConditionalDepartment -ConditionalStateOrProvince -Confirm -DisplayName -ErrorAction -ErrorVariable -Identity -IncludedRecipients -Name -OutBuffer -OutVariable -RecipientFilter -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AddressBookPolicy -AddressLists -Confirm -ErrorAction -ErrorVariable -GlobalAddressList -Identity -Name -OfflineAddressBook -OutBuffer -OutVariable -RoomList -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OfflineAddressBook -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-GlobalAddressList -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AddressList -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Recursive -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AddressBookPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OfflineAddressBook -AddressLists -Confirm -DiffRetentionPeriod -ErrorAction -ErrorVariable -IsDefault -Name -OutBuffer -OutVariable -Versions -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-GlobalAddressList -ConditionalCompany -ConditionalCustomAttribute1 -ConditionalCustomAttribute10 -ConditionalCustomAttribute11 -ConditionalCustomAttribute12 -ConditionalCustomAttribute13 -ConditionalCustomAttribute14 -ConditionalCustomAttribute15 -ConditionalCustomAttribute2 -ConditionalCustomAttribute3 -ConditionalCustomAttribute4 -ConditionalCustomAttribute5 -ConditionalCustomAttribute6 -ConditionalCustomAttribute7 -ConditionalCustomAttribute8 -ConditionalCustomAttribute9 -ConditionalDepartment -ConditionalStateOrProvince -Confirm -ErrorAction -ErrorVariable -IncludedRecipients -Name -OutBuffer -OutVariable -RecipientFilter -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AddressList -ConditionalCompany -ConditionalCustomAttribute1 -ConditionalCustomAttribute10 -ConditionalCustomAttribute11 -ConditionalCustomAttribute12 -ConditionalCustomAttribute13 -ConditionalCustomAttribute14 -ConditionalCustomAttribute15 -ConditionalCustomAttribute2 -ConditionalCustomAttribute3 -ConditionalCustomAttribute4 -ConditionalCustomAttribute5 -ConditionalCustomAttribute6 -ConditionalCustomAttribute7 -ConditionalCustomAttribute8 -ConditionalCustomAttribute9 -ConditionalDepartment -ConditionalStateOrProvince -Confirm -Container -DisplayName -ErrorAction -ErrorVariable -IncludedRecipients -Name -OutBuffer -OutVariable -RecipientFilter -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AddressBookPolicy -AddressLists -Confirm -ErrorAction -ErrorVariable -GlobalAddressList -Name -OfflineAddressBook -OutBuffer -OutVariable -RoomList -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OfflineAddressBook -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-GlobalAddressList -DefaultOnly -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressList -Container -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SearchText -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressBookPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/0ae2be24-2fc6-42df-9ac0-afba971bcb01.json b/RoleDefinitions/0ae2be24-2fc6-42df-9ac0-afba971bcb01.json new file mode 100644 index 000000000..9b8c8bc32 --- /dev/null +++ b/RoleDefinitions/0ae2be24-2fc6-42df-9ac0-afba971bcb01.json @@ -0,0 +1,19 @@ +{ + "id": "0ae2be24-2fc6-42df-9ac0-afba971bcb01", + "description": "Lets people create, edit, delete, and view usage of sensitivity labels and their policies.", + "displayName": "SensitivityLabelAdministrator", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-LabelProperties -ApplyToUsers -GrantAccessToAllCompanyDomainUsers -GrantAccessToAllUsers -GrantAccessToNoUsers -Identity -Verbose" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/0bd113fe-6be5-400c-a28f-ae5553f9c0be.json b/RoleDefinitions/0bd113fe-6be5-400c-a28f-ae5553f9c0be.json new file mode 100644 index 000000000..5b79fdfba --- /dev/null +++ b/RoleDefinitions/0bd113fe-6be5-400c-a28f-ae5553f9c0be.json @@ -0,0 +1,93 @@ +{ + "id": "0bd113fe-6be5-400c-a28f-ae5553f9c0be", + "displayName": "Policy and Profile manager", + "description": "Policy and Profile Managers manage compliance policy, configuration profiles, Apple enrollment, Android Enterprise enrollment profiles and corporate device identifiers.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "0bd113fe-6be5-400c-a28f-ae5553f9c0be", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/DeviceConfigurations/Create", + "Microsoft.Intune/DeviceConfigurations/Read", + "Microsoft.Intune/DeviceConfigurations/Update", + "Microsoft.Intune/DeviceConfigurations/Delete", + "Microsoft.Intune/DeviceConfigurations/Assign", + "Microsoft.Intune/DeviceConfigurations/ViewReports", + "Microsoft.Intune/DeviceCompliancePolices/Create", + "Microsoft.Intune/DeviceCompliancePolices/Read", + "Microsoft.Intune/DeviceCompliancePolices/ViewReports", + "Microsoft.Intune/DeviceCompliancePolices/Update", + "Microsoft.Intune/DeviceCompliancePolices/Delete", + "Microsoft.Intune/DeviceCompliancePolices/Assign", + "Microsoft.Intune/EnrollmentProgramToken/Create", + "Microsoft.Intune/EnrollmentProgramToken/Read", + "Microsoft.Intune/EnrollmentProgramToken/Update", + "Microsoft.Intune/EnrollmentProgramToken/Delete", + "Microsoft.Intune/AppleEnrollmentProfiles/Create", + "Microsoft.Intune/AppleEnrollmentProfiles/Read", + "Microsoft.Intune/AppleEnrollmentProfiles/Update", + "Microsoft.Intune/AppleEnrollmentProfiles/Delete", + "Microsoft.Intune/AppleEnrollmentProfiles/Assign", + "Microsoft.Intune/EnrollmentProfiles/EnrollmentTimeMembershipAssign", + "Microsoft.Intune/AppleDeviceSerialNumbers/Create", + "Microsoft.Intune/AppleDeviceSerialNumbers/Read", + "Microsoft.Intune/AppleDeviceSerialNumbers/Update", + "Microsoft.Intune/AppleDeviceSerialNumbers/Delete", + "Microsoft.Intune/CorporateDeviceIdentifiers/Create", + "Microsoft.Intune/CorporateDeviceIdentifiers/Read", + "Microsoft.Intune/CorporateDeviceIdentifiers/Update", + "Microsoft.Intune/CorporateDeviceIdentifiers/Delete", + "Microsoft.Intune/ManagedApps/Create", + "Microsoft.Intune/ManagedApps/Read", + "Microsoft.Intune/ManagedApps/Update", + "Microsoft.Intune/ManagedApps/Delete", + "Microsoft.Intune/ManagedApps/Assign", + "Microsoft.Intune/AndroidSync/Read", + "Microsoft.Intune/AndroidSync/UpdateEnrollmentProfiles", + "Microsoft.Intune/AndroidSync/UpdateOnboarding", + "Microsoft.Intune/AndroidSync/UpdateApps", + "Microsoft.Intune/Audit/Read", + "Microsoft.Intune/PolicySets/Assign", + "Microsoft.Intune/PolicySets/Create", + "Microsoft.Intune/PolicySets/Delete", + "Microsoft.Intune/PolicySets/Read", + "Microsoft.Intune/PolicySets/Update", + "Microsoft.Intune/AssignmentFilter/Create", + "Microsoft.Intune/AssignmentFilter/Delete", + "Microsoft.Intune/AssignmentFilter/Read", + "Microsoft.Intune/AssignmentFilter/Update", + "Microsoft.Intune/MicrosoftDefenderATP/Read", + "Microsoft.Intune/PartnerDeviceManagement/Read", + "Microsoft.Intune/MobileThreatDefense/Read", + "Microsoft.Intune/CertificateConnector/Read", + "Microsoft.Intune/DerivedCredentials/Read", + "Microsoft.Intune/AndroidFota/Read", + "Microsoft.Intune/QuietTimePolicies/Create", + "Microsoft.Intune/QuietTimePolicies/Read", + "Microsoft.Intune/QuietTimePolicies/Update", + "Microsoft.Intune/QuietTimePolicies/Delete", + "Microsoft.Intune/QuietTimePolicies/Assign", + "Microsoft.Intune/QuietTimePolicies/ViewReports", + "Microsoft.Intune/CloudAttach/ResourceExplorer", + "Microsoft.Intune/CloudAttach/ClientDetails", + "Microsoft.Intune/CloudAttach/Timeline", + "Microsoft.Intune/CloudAttach/Collections", + "Microsoft.Intune/CloudAttach/Applications", + "Microsoft.Intune/CloudAttach/Scripts", + "Microsoft.Intune/CloudAttach/SoftwareUpdates", + "Microsoft.Intune/WindowsOSRecovery/Create", + "Microsoft.Intune/WindowsOSRecovery/Read", + "Microsoft.Intune/WindowsOSRecovery/Update", + "Microsoft.Intune/WindowsOSRecovery/Delete", + "Microsoft.Intune/WindowsOSRecovery/Assign" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/0bf8df8b-43fa-4c50-8a6b-73240e9f12a7.json b/RoleDefinitions/0bf8df8b-43fa-4c50-8a6b-73240e9f12a7.json new file mode 100644 index 000000000..9c5ce423f --- /dev/null +++ b/RoleDefinitions/0bf8df8b-43fa-4c50-8a6b-73240e9f12a7.json @@ -0,0 +1,19 @@ +{ + "id": "0bf8df8b-43fa-4c50-8a6b-73240e9f12a7", + "description": "Allows the app to read user's mailbox settings in all mailboxes without a signed-in user", + "displayName": "Application MailboxSettings.Read", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "MailboxSettings.Read" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/0dfcfca4-6011-4d60-be86-7f5d9bbe380f.json b/RoleDefinitions/0dfcfca4-6011-4d60-be86-7f5d9bbe380f.json new file mode 100644 index 000000000..bcd0a8120 --- /dev/null +++ b/RoleDefinitions/0dfcfca4-6011-4d60-be86-7f5d9bbe380f.json @@ -0,0 +1,183 @@ +{ + "id": "0dfcfca4-6011-4d60-be86-7f5d9bbe380f", + "description": "This role enables administrators to manage existing mailboxes, mail users, and mail contacts in an organization. This role can't create these recipients. Use MailRecipientCreation roles to create them.\r\nThis role type doesn't enable you to manage mail-enabled public folders or distribution groups. Use the MailEnabledPublicFolders and DistributionGroup roles to manage these objects. \r\nIf your organization has a split permissions model where recipient creation and management are performed by different groups, assign the MailRecipientCreation roles to the group that performs recipient creation and the MailRecipients roles to the group that performs recipient management.", + "displayName": "Mail Recipients", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) New-Mailbox -EnableRoomMailboxAccount -ProxyEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPermission -Credential -ErrorAction -ErrorVariable -GroupMailbox -Identity -IncludeSoftDeletedUserPermissions -IncludeUnresolvedPermissions -IncludeUserWithDisplayName -OutBuffer -OutVariable -Owner -ReadFromDomainController -ResultSize -SoftDeletedMailbox -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AccessLabel -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AccessLabel -Constraints -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AccessLabel -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OwaMailboxPolicy -AccountTransferEnabled -ActionForUnknownFileAndMIMETypes -ActiveSyncIntegrationEnabled -AllAddressListsEnabled -AllowCopyContactsToDeviceAddressBook -AllowedFileTypes -AllowedMimeTypes -AllowedOrganizationAccountDomains -AllowOfflineOn -BizBarEnabled -BlockedFileTypes -BlockedMimeTypes -BookingsMailboxCreationEnabled -BookingsMailboxDomain -CalendarEnabled -ChangePasswordEnabled -ChangeSettingsAccountEnabled -ClassicAttachmentsEnabled -ConditionalAccessPolicy -Confirm -ContactsEnabled -DefaultClientLanguage -DefaultTheme -DelegateAccessEnabled -DirectFileAccessOnPrivateComputersEnabled -DirectFileAccessOnPublicComputersEnabled -DisableFacebook -DisplayPhotosEnabled -EmptyStateEnabled -ErrorAction -ErrorVariable -ExplicitLogonEnabled -ExternalImageProxyEnabled -ExternalSPMySiteHostURL -FacebookEnabled -FeedbackEnabled -ForceSaveAttachmentFilteringEnabled -ForceSaveFileTypes -ForceSaveMimeTypes -ForceWacViewingFirstOnPrivateComputers -ForceWacViewingFirstOnPublicComputers -FreCardsEnabled -GlobalAddressListEnabled -GroupCreationEnabled -HideClassicOutlookToggleOut -Identity -InstantMessagingEnabled -InstantMessagingType -InterestingCalendarsEnabled -InternalSPMySiteHostURL -IRMEnabled -IsDefault -ItemsToOtherAccountsEnabled -JournalEnabled -LinkedInEnabled -LocalEventsEnabled -LogonAndErrorLanguage -MessagePreviewsDisabled -MonthlyUpdatesEnabled -Name -NotesEnabled -NpsSurveysEnabled -OfflineEnabledWeb -OfflineEnabledWin -OneWinNativeOutlookEnabled -OnSendAddinsEnabled -OrganizationEnabled -OutboundCharset -OutBuffer -OutlookBetaToggleEnabled -OutlookDataFile -OutlookNewslettersAccessLevel -OutlookNewslettersReactions -OutlookNewslettersShowMore -OutVariable -OWALightEnabled -PersonalAccountCalendarsEnabled -PersonalAccountsEnabled -PhoneticSupportEnabled -PlacesEnabled -PremiumClientEnabled -PrintWithoutDownloadEnabled -ProjectMocaEnabled -PublicFoldersEnabled -RecoverDeletedItemsEnabled -ReferenceAttachmentsEnabled -RemindersAndNotificationsEnabled -ReportJunkEmailEnabled -RulesEnabled -SatisfactionEnabled -SaveAttachmentsToCloudEnabled -SearchFoldersEnabled -SetPhotoEnabled -SetPhotoURL -ShowOnlineArchiveEnabled -SignaturesEnabled -SilverlightEnabled -SkipCreateUnifiedGroupCustomSharepointClassification -SMimeSuppressNameChecksEnabled -SpellCheckerEnabled -TasksEnabled -TeamsnapCalendarsEnabled -TextMessagingEnabled -ThemeSelectionEnabled -UMIntegrationEnabled -UseGB18030 -UseISO885915 -UserVoiceEnabled -WacEditingEnabled -WacExternalServicesEnabled -WacOMEXEnabled -WacViewingOnPrivateComputersEnabled -WacViewingOnPublicComputersEnabled -WarningAction -WarningVariable -WeatherEnabled -WebPartsFrameOptionsType -WhatIf -WSSAccessOnPrivateComputersEnabled -WSSAccessOnPublicComputersEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -AccountDisabled -AddressBookPolicy -Alias -ApplyMandatoryProperties -ArchiveName -BypassModerationFromSendersOrMembers -CalendarRepairDisabled -CalendarVersionStoreDisabled -ClearThrottlingPolicyAssignment -Confirm -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DataEncryptionPolicy -DeliverToMailboxAndForward -DisplayName -ElcProcessingDisabled -EmailAddressDisplayNames -EmailAddresses -EnableRoomMailboxAccount -EndDateForRetentionHold -EnforcedTimestamps -ErrorAction -ErrorVariable -ExcludeFromAllOrgHolds -ExcludeFromOrgHolds -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ExternalOofOptions -Force -ForwardingAddress -ForwardingSmtpAddress -GrantSendOnBehalfTo -GroupMailbox -HiddenFromAddressListsEnabled -Identity -ImmutableId -InactiveMailbox -IsExchangeCloudManaged -IssueWarningQuota -JournalArchiveAddress -Languages -LitigationHoldDate -LitigationHoldDuration -LitigationHoldEnabled -LitigationHoldOwner -MailboxRegion -MailboxRegionSuffix -MailTip -MailTipTranslations -MaxReceiveSize -MaxSendSize -MessageCopyForSendOnBehalfEnabled -MessageCopyForSentAsEnabled -MessageCopyForSMTPClientSubmissionEnabled -MessageTrackingReadStatusEnabled -MicrosoftOnlineServicesID -ModeratedBy -ModerationEnabled -Name -NonCompliantDevices -Office -OutBuffer -OutVariable -ProhibitSendQuota -ProhibitSendReceiveQuota -ProvisionedForOfficeGraph -PublicFolder -RecalculateInactiveMailbox -RecipientLimits -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -RemoveDelayHoldApplied -RemoveDelayReleaseHoldApplied -RemoveDisabledArchive -RemoveMailboxProvisioningConstraint -RemoveOrphanedHolds -RequireSenderAuthenticationEnabled -ResourceCapacity -ResourceCustom -RetainDeletedItemsFor -RetentionComment -RetentionHoldEnabled -RetentionPolicy -RetentionUrl -RoleAssignmentPolicy -RoomMailboxPassword -RulesQuota -SchedulerAssistant -SecondaryAddress -SendModerationNotifications -SharingPolicy -SimpleDisplayName -SingleItemRecoveryEnabled -StartDateForRetentionHold -StsRefreshTokensValidFrom -Type -UpdateEnforcedTimestamp -UseDatabaseQuotaDefaults -UseDatabaseRetentionDefaults -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-InboxRule -AlwaysDeleteOutlookRulesBlob -ApplyCategory -ApplySystemCategory -BodyContainsWords -Confirm -CopyToFolder -DeleteMessage -DeleteSystemCategory -DisplayAlert -ErrorAction -ErrorVariable -ExceptIfBodyContainsWords -ExceptIfFlaggedForAction -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfHasAttachment -ExceptIfHasClassification -ExceptIfHeaderContainsWords -ExceptIfMessageTypeMatches -ExceptIfMyNameInCcBox -ExceptIfMyNameInToBox -ExceptIfMyNameInToOrCcBox -ExceptIfMyNameNotInToBox -ExceptIfReceivedAfterDate -ExceptIfReceivedBeforeDate -ExceptIfRecipientAddressContainsWords -ExceptIfSentOnlyToMe -ExceptIfSentTo -ExceptIfSubjectContainsWords -ExceptIfSubjectOrBodyContainsWords -ExceptIfWithImportance -ExceptIfWithinSizeRangeMaximum -ExceptIfWithinSizeRangeMinimum -ExceptIfWithSensitivity -FlaggedForAction -Force -ForwardAsAttachmentTo -ForwardTo -From -FromAddressContainsWords -HasAttachment -HasClassification -HeaderContainsWords -Identity -Mailbox -MarkAsRead -MarkImportance -MessageTypeMatches -MoveToFolder -MyNameInCcBox -MyNameInToBox -MyNameInToOrCcBox -MyNameNotInToBox -Name -OutBuffer -OutVariable -PinMessage -Priority -ReceivedAfterDate -ReceivedBeforeDate -RecipientAddressContainsWords -RedirectTo -SentOnlyToMe -SentTo -SoftDeleteMessage -StopProcessingRules -SubjectContainsWords -SubjectOrBodyContainsWords -WarningAction -WarningVariable -WhatIf -WithImportance -WithinSizeRangeMaximum -WithinSizeRangeMinimum -WithSensitivity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HVEAccountSettings -Identity -ReplyTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RecipientPermission -AccessRights -Confirm -Deny -ErrorAction -ErrorVariable -Identity -MultiTrustees -OutBuffer -OutVariable -SkipDomainValidationForMailContact -SkipDomainValidationForMailUser -SkipDomainValidationForSharedMailbox -Trustee -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-InboxRule -AlwaysDeleteOutlookRulesBlob -ApplyCategory -ApplySystemCategory -BodyContainsWords -Confirm -CopyToFolder -DeleteMessage -DeleteSystemCategory -DisplayAlert -ErrorAction -ErrorVariable -ExceptIfBodyContainsWords -ExceptIfFlaggedForAction -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfHasAttachment -ExceptIfHasClassification -ExceptIfHeaderContainsWords -ExceptIfMessageTypeMatches -ExceptIfMyNameInCcBox -ExceptIfMyNameInToBox -ExceptIfMyNameInToOrCcBox -ExceptIfMyNameNotInToBox -ExceptIfReceivedAfterDate -ExceptIfReceivedBeforeDate -ExceptIfRecipientAddressContainsWords -ExceptIfSentOnlyToMe -ExceptIfSentTo -ExceptIfSubjectContainsWords -ExceptIfSubjectOrBodyContainsWords -ExceptIfWithImportance -ExceptIfWithinSizeRangeMaximum -ExceptIfWithinSizeRangeMinimum -ExceptIfWithSensitivity -FlaggedForAction -Force -ForwardAsAttachmentTo -ForwardTo -From -FromAddressContainsWords -FromMessageId -HasAttachment -HasClassification -HeaderContainsWords -Mailbox -MarkAsRead -MarkImportance -MessageTypeMatches -MoveToFolder -MyNameInCcBox -MyNameInToBox -MyNameInToOrCcBox -MyNameNotInToBox -Name -OutBuffer -OutVariable -PinMessage -Priority -ReceivedAfterDate -ReceivedBeforeDate -RecipientAddressContainsWords -RedirectTo -SentOnlyToMe -SentTo -SoftDeleteMessage -StopProcessingRules -SubjectContainsWords -SubjectOrBodyContainsWords -ValidateOnly -WarningAction -WarningVariable -WhatIf -WithImportance -WithinSizeRangeMaximum -WithinSizeRangeMinimum -WithSensitivity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RequestBrokerResult -RequestId -ServerId -Timeout", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -Archive -Async -ErrorAction -ErrorVariable -Filter -GroupMailbox -Identity -InactiveMailboxOnly -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeEmailAddressDisplayNames -IncludeForwardingAddressWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeInactiveMailbox -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -Properties -PublicFolder -RecipientTypeDetails -ResultSize -SoftDeletedMailbox -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HVEAccountSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.Setup) set-CASMailboxPlan -ActiveSyncEnabled -ECPEnabled -EwsEnabled -Identity -ImapEnabled -MAPIEnabled -OWAEnabled -OwaMailboxPolicy -PopEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -Alias -BypassModerationFromSendersOrMembers -Confirm -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DataEncryptionPolicy -DisplayName -EmailAddresses -EnableLitigationHoldForMigration -ErrorAction -ErrorVariable -ExcludeFromAllOrgHolds -ExcludeFromOrgHolds -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ExternalEmailAddress -FederatedIdentity -ForceUpgrade -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -HVEAccount -Identity -ImmutableId -JournalArchiveAddress -LOBAppAccount -MacAttachmentFormat -MailboxRegion -MailboxRegionSuffix -MailTip -MailTipTranslations -MaxReceiveSize -MaxSendSize -MessageBodyFormat -MessageFormat -MicrosoftOnlineServicesID -ModeratedBy -ModerationEnabled -Name -OutBuffer -OutVariable -PrimarySmtpAddress -RecalculateInactiveMailUser -RecipientLimits -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -RemoveDelayHoldApplied -RemoveDelayReleaseHoldApplied -RemoveDisabledArchive -RemoveLitigationHoldEnabled -RemoveMailboxProvisioningConstraint -RemoveOrphanedHolds -RequireSenderAuthenticationEnabled -SecondaryAddress -SendModerationNotifications -SimpleDisplayName -UseMapiRichTextFormat -UsePreferMessageFormat -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailUser -Anr -ErrorAction -ErrorVariable -Filter -HVEAccount -Identity -LOBAppAccount -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SharedWithMailUser -SoftDeletedMailUser -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Place -AudioDeviceName -Building -Capacity -City -CountryOrRegion -DisplayDeviceName -ErrorAction -ErrorVariable -Floor -FloorLabel -GeoCoordinates -Identity -IsWheelChairAccessible -Label -MTREnabled -ParentId -Phone -PostalCode -State -Street -Tags -VideoDeviceName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantScanRequestStatistics -IncludeReport", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxCalendarConfiguration -AgendaMailEnabled -AgendaMailIntroductionEnabled -AgendaPaneEnabled -AutoDeclineWhenBusy -CalendarFeedsPreferredLanguage -CalendarFeedsPreferredRegion -CalendarFeedsRootPageId -Confirm -ConversationalSchedulingEnabled -CreateEventsFromEmailAsPrivate -DailyAgendaMailSchedule -DefaultMeetingDuration -DefaultMinutesToReduceLongEventsBy -DefaultMinutesToReduceShortEventsBy -DefaultOnlineMeetingProvider -DefaultReminderTime -DeleteMeetingRequestOnRespond -DiningEventsFromEmailEnabled -EntertainmentEventsFromEmailEnabled -ErrorAction -ErrorVariable -EventsFromEmailEnabled -FirstWeekOfYear -FlightEventsFromEmailEnabled -HotelEventsFromEmailEnabled -Identity -InvoiceEventsFromEmailEnabled -LocalEventsEnabled -LocalEventsLocation -LocationDetailsInFreeBusy -MailboxLocation -OnlineMeetingsByDefaultEnabled -OutBuffer -OutVariable -PackageDeliveryEventsFromEmailEnabled -PreserveDeclinedMeetings -RemindersEnabled -ReminderSoundEnabled -RentalCarEventsFromEmailEnabled -ServiceAppointmentEventsFromEmailEnabled -ShortenEventScopeDefault -ShowWeekNumbers -SkipAgendaMailOnFreeDays -TimeIncrement -UseBrightCalendarColorThemeInOwa -WarningAction -WarningVariable -WeatherEnabled -WeatherLocationBookmark -WeatherLocations -WeatherUnit -WeekStartDay -WhatIf -WorkDays -WorkingHoursEndTime -WorkingHoursStartTime -WorkingHoursTimeZone -WorkspaceUserEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedGroup -Anr -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAllProperties -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -IncludeRejectMessagesFromSendersOrMembersWithDisplayNames -IncludeSoftDeletedGroups -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroup -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -DomainController -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxJunkEmailConfiguration -BlockedSendersAndDomains -Confirm -ContactsTrusted -Enabled -ErrorAction -ErrorVariable -FailOnError -Identity -OutBuffer -OutVariable -SenderScreeningEnabled -TrustedListsOnly -TrustedRecipientsAndDomains -TrustedSendersAndDomains -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxExtendedProperty -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -AssistantName -AuthenticationPolicy -BlockCloudCache -CanHaveCloudCache -City -ClearDataEncryptionPolicy -Company -Confirm -CountryOrRegion -Department -DesiredWorkloads -DisplayName -ErrorAction -ErrorVariable -EXOModuleEnabled -Fax -FirstName -Force -GeoCoordinates -HomePhone -Identity -Initials -IsShadowMailbox -LastName -MailboxRegion -MailboxRegionSuffix -ManagedOnboardingType -Manager -MobilePhone -Name -Notes -Office -OtherFax -OtherHomePhone -OtherTelephone -OutBuffer -OutVariable -Pager -PermanentlyClearPreviousMailboxInfo -Phone -PhoneticDisplayName -PostalCode -PostOfficeBox -PublicFolder -RemotePowerShellEnabled -RemoveMailboxProvisioningConstraint -ResetPasswordOnNextLogon -SeniorityIndex -SimpleDisplayName -StateOrProvince -StreetAddress -StsRefreshTokensValidFrom -Title -VIP -WarningAction -WarningVariable -WebPage -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxMessageConfiguration -AfterMoveOrDeleteBehavior -AlwaysShowBcc -AlwaysShowFrom -AutoAddSignature -AutoAddSignatureOnMobile -AutoAddSignatureOnReply -CheckForForgottenAttachments -CheckForReportJunkDialog -Confirm -ConversationSortOrder -DefaultFontColor -DefaultFontFlags -DefaultFontName -DefaultFontSize -DefaultFormat -DefaultSignature -DefaultSignatureOnReply -DeleteSignatureName -DisplayDensityMode -EchoGroupMessageBackToSubscribedSender -EmailComposeMode -EmptyDeletedItemsOnLogoff -ErrorAction -ErrorVariable -FavoriteNodes -FavoritesBitFlags -FrequentlyUsedFolders -GlobalReadingPanePosition -HideDeletedItems -Identity -InboxPlusTabs -InboxPlusWatermarks -IsDarkModeTheme -IsFavoritesFolderTreeCollapsed -IsFocusedInboxEnabled -IsFocusedInboxOnAdminLastUpdateTime -IsFocusedInboxOnLastUpdateTime -IsMailRootFolderTreeCollapsed -IsReplyAllTheDefaultResponse -LinkPreviewEnabled -MailFolderPaneExpanded -MailSendUndoInterval -ManuallyPickCertificate -MruEmojis -NavigationBarWidth -NavigationPaneViewOption -NewEnabledPonts -NewItemNotification -OutBuffer -OutVariable -PreferAccessibleContent -PreviewMarkAsReadBehavior -PreviewMarkAsReadDelaytime -ReadReceiptResponse -ReportJunkSelected -SendAddressDefault -SendAsMruAddresses -ShowConversationAsTree -ShowInlinePreviews -ShowNotificationBar -ShowPreviewTextInListView -ShowReadingPaneOnFirstLoad -ShowSenderOnTopInListView -ShowUpNext -SignatureHtml -SignatureHtmlBody -SignatureName -SignatureText -SignatureTextOnMobile -SigningCertificateId -SigningCertificateSubject -SmimeEncrypt -SmimeSign -UseDefaultSignatureOnMobile -WarningAction -WarningVariable -WebSuggestedRepliesEnabledForUser -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxMessageConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SignatureName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAnalysisRequestStatistics -CSVData -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeAnalysisResult -IncludeFolderDetails -IncludeMappingResult -IncludeReport -ItemsStartTime -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailContact -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -Alias -BypassModerationFromSendersOrMembers -Confirm -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DisplayName -EmailAddresses -ErrorAction -ErrorVariable -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ExternalEmailAddress -ForceUpgrade -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -Identity -MacAttachmentFormat -MailTip -MailTipTranslations -MessageBodyFormat -MessageFormat -ModeratedBy -ModerationEnabled -Name -OutBuffer -OutVariable -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -RequireSenderAuthenticationEnabled -SecondaryAddress -SendModerationNotifications -SimpleDisplayName -UseMapiRichTextFormat -UsePreferMessageFormat -UserCertificate -UserSMimeCertificate -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -MailboxName -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleAssignment -AssignmentMethod -ConfigWriteScope -CustomRecipientWriteScope -Delegating -Enabled -ErrorAction -ErrorVariable -Exclusive -ExclusiveRecipientWriteScope -GetEffectiveUsers -Identity -OutBuffer -OutVariable -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientWriteScope -Role -RoleAssignee -RoleAssigneeType -WarningAction -WarningVariable -WritableRecipient", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SweepRule -Confirm -DestinationFolder -Enabled -ErrorAction -ErrorVariable -KeepForDays -KeepLatest -Mailbox -Name -OutBuffer -OutVariable -Provider -Sender -SourceFolder -SystemCategory -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SweepRule -Confirm -DestinationFolder -Enabled -ErrorAction -ErrorVariable -Identity -KeepForDays -KeepLatest -Mailbox -Name -OutBuffer -OutVariable -Provider -Sender -SourceFolder -SystemCategory -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Upgrade-DistributionGroup -ActionType -Confirm -DlIdentities -ExecutingUser -ExoErrorAsWarning -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-BookingMailboxPermission -Identity -Permission -StaffMember", + "(Microsoft.Exchange.Management.Powershell.Support) Get-ExportedCustomerContent -RequestId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -BlockMoveMessagesForGroupFolders -DefaultGroupAccessType -DelayedDelicensingEnabled -EndUserMailNotificationForDelayedDelicensingEnabled -IsGroupFoldersAndRulesEnabled -IsGroupMemberAllowedToEditContent -TenantAdminNotificationForDelayedDelicensingEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Debug-AdditionalCapacityProtection -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CalendarProcessing -AddAdditionalResponse -AdditionalResponse -AddNewRequestsTentatively -AddOrganizerToSubject -AllBookInPolicy -AllowConflicts -AllowRecurringMeetings -AllRequestInPolicy -AllRequestOutOfPolicy -AutomateProcessing -BookingType -BookingWindowInDays -BookInPolicy -Confirm -ConflictPercentageAllowed -DeleteAttachments -DeleteComments -DeleteNonCalendarItems -DeleteSubject -EnableAutoRelease -EnableResponseDetails -EnforceCapacity -EnforceSchedulingHorizon -ErrorAction -ErrorVariable -ForwardRequestsToDelegates -Identity -IgnoreDefaultScope -MaximumConflictInstances -MaximumDurationInMinutes -MinimumDurationInMinutes -OrganizerInfo -OutBuffer -OutVariable -PostReservationMaxClaimTimeInMinutes -ProcessExternalMeetingMessages -RemoveCanceledMeetings -RemoveForwardedMeetingNotifications -RemoveOldMeetingMessages -RemovePrivateProperty -RequestInPolicy -RequestOutOfPolicy -ResourceDelegates -ScheduleOnlyDuringWorkHours -TentativePendingApproval -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SweepRule -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -Provider -ResultSize -SkipCount -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboxRule -BypassScopeCheck -DescriptionTimeFormat -DescriptionTimeZone -ErrorAction -ErrorVariable -Identity -IncludeHidden -Mailbox -OutBuffer -OutVariable -ResultSize -SkipCount -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-StoreAdminConnectivity -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PendingDelicenseUser -Identity -ResultSize -ShowDueObjectsOnly", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxRegionalConfiguration -Archive -Confirm -DateFormat -ErrorAction -ErrorVariable -Identity -Language -LocalizeDefaultFolderName -MailboxLocation -OutBuffer -OutVariable -TimeFormat -TimeZone -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxRegionalConfiguration -Archive -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -VerifyDefaultFolderNameLanguage -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolderPermission -ErrorAction -ErrorVariable -GroupMailbox -Identity -OutBuffer -OutVariable -ResultSize -SkipCount -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Place -ErrorAction -ErrorVariable -Identity -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Expedite-Delicensing -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BookingMailbox -AccessingUser -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -DomainController -Process -SoftDeletedMailbox", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxAnalysisRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAnalysisRequest -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -SyncProtocol -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarConfiguration -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncRequestStatistics -DiagnosticInfo -DiagnosticOnly -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -IncludeSlaReport -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolderStatistics -Archive -Database -DiagnosticInfo -ErrorAction -ErrorVariable -FolderScope -Identity -IncludeAnalysis -IncludeOldestAndNewestItems -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -ResultSize -SkipCount -StoreMailboxIdentity -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxIRMAccess -Identity -User", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxIRMAccess -AccessLevel -Identity -User", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxIRMAccess -Identity -User", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedGroup -AcceptMessagesOnlyFromSendersOrMembers -AccessType -Alias -AlwaysSubscribeMembersToCalendarEvents -AuditLogAgeLimit -AutoSubscribeNewMembers -CalendarMemberReadOnly -Classification -Confirm -ConnectorsEnabled -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DataEncryptionPolicy -DisplayName -EmailAddresses -ErrorAction -ErrorVariable -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ForceUpgrade -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -HiddenFromExchangeClientsEnabled -Identity -InformationBarrierMode -IsMemberAllowedToEditContent -Language -MailboxRegion -MailTip -MailTipTranslations -MaxReceiveSize -MaxSendSize -ModeratedBy -ModerationEnabled -Notes -OutBuffer -OutVariable -PrimarySmtpAddress -RejectMessagesFromSendersOrMembers -RequireSenderAuthenticationEnabled -SensitivityLabelId -SubscriptionEnabled -UnifiedGroupWelcomeMessageEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-UnifiedGroup -AccessType -Alias -AlwaysSubscribeMembersToCalendarEvents -AutoSubscribeNewMembers -Classification -Confirm -ConvertClosedDlToPrivateGroup -DataEncryptionPolicy -DeleteDlAfterMigration -DisplayName -DlIdentity -EmailAddresses -ExecutingUser -ExoErrorAsWarning -HiddenGroupMembershipEnabled -IsMemberAllowedToEditContent -Language -MailboxRegion -ManagedBy -Members -Name -Notes -Owner -PrimarySmtpAddress -RequireSenderAuthenticationEnabled -SensitivityLabelId -SubscriptionEnabled -SuppressWarmupMessage -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-RecipientPermission -AccessRights -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Trustee -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CASMailbox -ActiveSyncDebugLogging -ActiveSyncEnabled -ActiveSyncMailboxPolicy -ActiveSyncSuppressReadReceipt -Confirm -ErrorAction -ErrorVariable -EwsAllowEntourage -EwsAllowList -EwsAllowMacOutlook -EwsAllowOutlook -EwsApplicationAccessPolicy -EwsBlockList -EwsEnabled -Identity -ImapEnabled -ImapForceICalForCalendarRetrievalOption -ImapMessagesRetrievalMimeFormat -ImapSuppressReadReceipt -ImapUseProtocolDefaults -IsOptimizedForAccessibility -MacOutlookEnabled -MAPIEnabled -OneWinNativeOutlookEnabled -OutBuffer -OutlookMobileEnabled -OutVariable -OWAEnabled -OWAforDevicesEnabled -OwaMailboxPolicy -PopEnabled -PopForceICalForCalendarRetrievalOption -PopMessagesRetrievalMimeFormat -PopSuppressReadReceipt -PopUseProtocolDefaults -PublicFolderClientAccess -ShowGalAsDefaultView -SmtpClientAuthenticationDisabled -UniversalOutlookEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxLocation -Confirm -Force -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxFolderPermission -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -ResetDelegateUserCollection -SendNotificationToUser -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-MailboxFolderPermission -AccessRights -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendNotificationToUser -SharingPermissionFlags -User -WarningAction -WarningVariable -WhatIf", + "SetUserPhoto", + "(Microsoft.Exchange.Management.Powershell.Support) Set-FocusedInbox -FocusedInboxOn -Identity", + "(Microsoft.Exchange.Management.Powershell.Support) Set-Clutter -CleanUpClutter -Enable -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Get-FocusedInbox -Identity", + "(Microsoft.Exchange.Management.Powershell.Support) Get-Clutter -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-Recipient -Confirm -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-MaskingIndex -Add -Force -Identity -Remove -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-HybridConfiguration -Confirm -ErrorAction -ErrorVariable -ForceUpgrade -OnPremisesCredentials -OutBuffer -OutVariable -SuppressOAuthWarning -TenantCredentials -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-OAuthConnectivity -AppOnly -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Mailbox -OutBuffer -OutVariable -ReloadConfig -Service -TargetUri -UseCachedToken -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MAPIConnectivity -Archive -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-InvitationManager -Debug -EmailLanguage -ErrorAction -ErrorVariable -Group -Identity -IgnoreSslCertificateErrors -Inviter -InviteReceiverEmail -InviterOrganization -IPAddress -OutBuffer -OutVariable -Token -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-InformationBarrierPolicy -SpecificRecipients", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxSpellingConfiguration -CheckBeforeSend -Confirm -DictionaryLanguage -ErrorAction -ErrorVariable -Identity -IgnoreMixedDigits -IgnoreUppercase -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxPlan -Confirm -ErrorAction -ErrorVariable -Force -Identity -IsDefault -IssueWarningQuota -MaxReceiveSize -MaxSendSize -OutBuffer -OutVariable -ProhibitSendQuota -ProhibitSendReceiveQuota -RecipientLimits -RetainDeletedItemsFor -RetentionPolicy -RoleAssignmentPolicy -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxLocation -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxCalendarFolder -Confirm -DetailLevel -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -PublishDateRangeFrom -PublishDateRangeTo -PublishEnabled -ResetUrl -SearchableUrlEnabled -SetAsSharingSource -SharedCalendarSyncStartDate -UseHttps -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxAutoReplyConfiguration -AutoDeclineFutureRequestsWhenOOF -AutoReplyState -Confirm -CreateOOFEvent -DeclineAllEventsForScheduledOOF -DeclineEventsForScheduledOOF -DeclineMeetingMessage -EndTime -ErrorAction -ErrorVariable -EventsToDeleteIDs -ExternalAudience -ExternalMessage -Identity -InternalMessage -OOFEventSubject -OutBuffer -OutVariable -Recipients -ReminderMessage -ReminderMinutesBeforeStart -StartTime -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-LinkedUser -CertificateSubject -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Group -Identity -PhoneticDisplayName", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EventsFromEmailConfiguration -CreateEventsFromEmailAsPrivate -ErrorAction -ErrorVariable -EventReservationProcessingLevel -FlightReservationProcessingLevel -FoodEstablishmentReservationProcessingLevel -Identity -InvoiceProcessingLevel -LodgingReservationProcessingLevel -OutBuffer -OutVariable -ParcelDeliveryProcessingLevel -RentalCarReservationProcessingLevel -ResetSettings -ServiceReservationProcessingLevel -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Contact -AssistantName -City -Company -Confirm -CountryOrRegion -Department -DisplayName -ErrorAction -ErrorVariable -Fax -FirstName -GeoCoordinates -HomePhone -Identity -Initials -LastName -Manager -MobilePhone -Name -Notes -Office -OtherFax -OtherHomePhone -OtherTelephone -OutBuffer -OutVariable -Pager -Phone -PhoneticDisplayName -PostalCode -PostOfficeBox -SeniorityIndex -SimpleDisplayName -StateOrProvince -StreetAddress -TelephoneAssistant -Title -WarningAction -WarningVariable -WebPage -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Reset-EventsFromEmailBlockStatus -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-UnifiedGroupLinks -Confirm -ErrorAction -ErrorVariable -Identity -Links -LinkType -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-UnifiedGroup -Confirm -Debug -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SyncRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf -Xrm", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OwaMailboxPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MobileDevice -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxPermission -AccessRights -BypassMasterAccountSid -ClearAutoMapping -Confirm -Deny -ErrorAction -ErrorVariable -GroupMailbox -Identity -IgnoreDefaultScope -InheritanceType -OutBuffer -OutVariable -ResetDefault -SoftDeletedMailbox -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HybridConfiguration -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ActiveSyncDevice -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Receive-ExoJob -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -SubJobId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OwaMailboxPolicy -Confirm -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-RecipientDataProperty -Confirm -ErrorAction -ErrorVariable -FileData -Identity -OutBuffer -OutVariable -Picture -SpokenName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-ContactList -Confirm -CSV -CSVData -CSVStream -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -IsVIP -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedGroupLinks -ErrorAction -ErrorVariable -Identity -LinkType -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPlan -Credential -Filter -IgnoreDefaultScope -ResultSize -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ToolInformation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Version -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncRequest -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -SyncProtocol -WarningAction -WarningVariable -WhatIf -WorkloadType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceStatus -ErrorAction -ErrorVariable -MaintenanceWindowDays -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SendAddress -AddressId -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleAssignmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RecipientStatisticsReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RecipientPermission -AccessRights -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -Trustee -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -Capabilities -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RbacDiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OwaMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnlineMeetingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceStatistics -ActiveSync -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -NotificationEmailAddresses -OutBuffer -OutVariable -OWAforDevices -RestApi -ShowRecoveryPassword -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDevice -ActiveSync -ErrorAction -ErrorVariable -Filter -Identity -Mailbox -OrganizationalUnit -OutBuffer -OutVariable -OWAforDevices -RestApi -ResultSize -SortBy -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -ErrorAction -ErrorVariable -Identity -IncludeLocales -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageCategory -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxStatistics -Archive -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxSpellingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPlan -AllMailboxPlanReleases -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxOverrideConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxLocation -Debug -ErrorAction -ErrorVariable -Identity -IncludePreviousPrimary -MailboxLocationType -MailUniversalDistributionGroup -OutBuffer -OutVariable -ResultSize -User -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxJunkEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarFolder -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAutoReplyConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailContact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-LogonStatistics -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoJob -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Recursive -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EventsFromEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Contact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarProcessing -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailboxPlan -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -ActiveSyncDebugLogging -ActiveSyncSuppressReadReceipt -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OrganizationalUnit -OutBuffer -OutVariable -ProtocolSettings -ReadIsOptimizedForAccessibility -RecalculateHasActiveSyncDevicePartnership -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressBookPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceStatistics -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -NotificationEmailAddresses -OutBuffer -OutVariable -ShowRecoveryPassword -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDevice -ErrorAction -ErrorVariable -Filter -Identity -Mailbox -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-Mailbox -Archive -ArchiveName -AutoExpandingArchive -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -RoleAssignmentPolicy -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-Mailbox -Archive -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -PermanentlyDisable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-MobileDevice -AccountOnly -Cancel -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmailAddresses -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-ActiveSyncDevice -Cancel -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmailAddresses -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-UnifiedGroupLinks -Confirm -ErrorAction -ErrorVariable -Identity -Links -LinkType -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-MailboxPermission -AccessRights -AutoMapping -Confirm -Deny -ErrorAction -ErrorVariable -GroupMailbox -Identity -IgnoreDefaultScope -InheritanceType -OutBuffer -OutVariable -Owner -User -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/10062cbb-ae17-41de-b308-c6ad3e78f2a1.json b/RoleDefinitions/10062cbb-ae17-41de-b308-c6ad3e78f2a1.json new file mode 100644 index 000000000..c9d4cc5b4 --- /dev/null +++ b/RoleDefinitions/10062cbb-ae17-41de-b308-c6ad3e78f2a1.json @@ -0,0 +1,21 @@ +{ + "id": "10062cbb-ae17-41de-b308-c6ad3e78f2a1", + "description": "", + "displayName": "MyDisplayName", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": false, + "templateId": "tplantcomau.onmicrosoft.com\\MyProfileInformation", + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -DisplayName -Identity -SimpleDisplayName", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -DisplayName -Identity -SimpleDisplayName" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/11451d60-acb2-45eb-a7d6-43d0f0125c13.json b/RoleDefinitions/11451d60-acb2-45eb-a7d6-43d0f0125c13.json index 8a8b2e80a..2555edc1e 100644 --- a/RoleDefinitions/11451d60-acb2-45eb-a7d6-43d0f0125c13.json +++ b/RoleDefinitions/11451d60-acb2-45eb-a7d6-43d0f0125c13.json @@ -32,6 +32,7 @@ "microsoft.directory/devices/extensionAttributeSet3/update", "microsoft.directory/devices/registeredOwners/update", "microsoft.directory/devices/registeredUsers/update", + "microsoft.directory/groups.security/assignedLabels/update", "microsoft.directory/groups.security/basic/update", "microsoft.directory/groups.security/classification/update", "microsoft.directory/groups.security/create", diff --git a/RoleDefinitions/118fde5d-ff94-42fd-b41c-5c3e764a937b.json b/RoleDefinitions/118fde5d-ff94-42fd-b41c-5c3e764a937b.json new file mode 100644 index 000000000..16976005d --- /dev/null +++ b/RoleDefinitions/118fde5d-ff94-42fd-b41c-5c3e764a937b.json @@ -0,0 +1,19 @@ +{ + "id": "118fde5d-ff94-42fd-b41c-5c3e764a937b", + "description": "Allows the app to create, read, update, and delete user's mailbox settings in all mailboxes without a signed-in user", + "displayName": "Application MailboxSettings.ReadWrite", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "MailboxSettings.ReadWrite" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/12b2a411-ccfc-48f6-98d6-c1681975575a.json b/RoleDefinitions/12b2a411-ccfc-48f6-98d6-c1681975575a.json new file mode 100644 index 000000000..9cb785695 --- /dev/null +++ b/RoleDefinitions/12b2a411-ccfc-48f6-98d6-c1681975575a.json @@ -0,0 +1,41 @@ +{ + "id": "12b2a411-ccfc-48f6-98d6-c1681975575a", + "description": "This role enables administrators to track messages in an organization.", + "displayName": "Message Tracking", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AvailabilityConfig -AllowedTenantIds -Confirm -ErrorAction -ErrorVariable -OrgWideAccount -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-AvailabilityAddressSpace -AccessMethod -Confirm -Credentials -ErrorAction -ErrorVariable -ForestName -OutBuffer -OutVariable -TargetAutodiscoverEpr -TargetServiceEpr -TargetTenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationRelationship -DeliveryReportEnabled -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-IntraOrganizationConnector -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-MessageTrackingReport -BypassDelegateChecking -Confirm -DoNotResolve -ErrorAction -ErrorVariable -Identity -MessageEntryId -MessageId -OutBuffer -OutVariable -Recipients -ResultSize -Sender -Subject -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AvailabilityAddressSpace -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OrganizationRelationship -DeliveryReportEnabled -DomainNames -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-IntraOrganizationConnector -Name -TargetAddressDomains", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterMessageTrace -End -Recipient -Sender -Start", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrackingReport -BypassDelegateChecking -DoNotResolve -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientPathFilter -Recipients -ReportTemplate -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AvailabilityAddressSpace -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/13cfcbd2-9b70-4c76-9d43-2ec88e829ca1.json b/RoleDefinitions/13cfcbd2-9b70-4c76-9d43-2ec88e829ca1.json new file mode 100644 index 000000000..20c8cb673 --- /dev/null +++ b/RoleDefinitions/13cfcbd2-9b70-4c76-9d43-2ec88e829ca1.json @@ -0,0 +1,20 @@ +{ + "id": "13cfcbd2-9b70-4c76-9d43-2ec88e829ca1", + "description": null, + "displayName": "Privacy Management Admin", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDomainGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/15485a44-710d-4fe2-92db-50e299a7d1db.json b/RoleDefinitions/15485a44-710d-4fe2-92db-50e299a7d1db.json new file mode 100644 index 000000000..a6144e5b0 --- /dev/null +++ b/RoleDefinitions/15485a44-710d-4fe2-92db-50e299a7d1db.json @@ -0,0 +1,36 @@ +{ + "id": "15485a44-710d-4fe2-92db-50e299a7d1db", + "description": "This role enables administrators and end users, such as legal and compliance officers, to search the administrator audit log and view the results that are returned. The audit log can be searched using the Shell or reports can be run from the Exchange Control Panel. Users and groups assigned this role can view anything contained within the audit log, including the cmdlets that were run and who ran them, the objects they were run against, and the parameters and values that were provided. Because the results returned might include sensitive information, this role should only be assigned to those with an explicit need to view the information.", + "displayName": "View-Only Audit Logs", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantMailFromAddress -ApplicationId -FromAddress -OrganizationId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-UnifiedAuditLog -Debug -EndDate -ErrorAction -ErrorVariable -Formatted -FreeText -HighCompleteness -IPAddresses -LongerRetentionEnabled -ObjectIds -Operations -OutBuffer -OutVariable -RecordType -ResultSize -SessionCommand -SessionId -SiteIds -StartDate -UserIds -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-MailboxAuditLog -EndDate -ErrorAction -ErrorVariable -ExternalAccess -GroupMailbox -HasAttachments -Identity -IncludeInactiveMailbox -LogonTypes -Mailboxes -Operations -OutBuffer -OutVariable -ResultSize -ShowDetails -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-AdminAuditLog -Cmdlets -EndDate -ErrorAction -ErrorVariable -ExternalAccess -IsSuccess -ObjectIds -OutBuffer -OutVariable -Parameters -ResultSize -StartDate -StartIndex -UserIds -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxAuditLogSearch -Confirm -EndDate -ErrorAction -ErrorVariable -ExternalAccess -GroupMailbox -HasAttachments -LogonTypes -Mailboxes -Name -Operations -OutBuffer -OutVariable -ShowDetails -StartDate -StatusMailRecipients -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AdminAuditLogSearch -Cmdlets -Confirm -EndDate -ErrorAction -ErrorVariable -ExternalAccess -Name -ObjectIds -OutBuffer -OutVariable -Parameters -StartDate -StatusMailRecipients -UserIds -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAuditBypassAssociation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditLogSearch -CreatedAfter -CreatedBefore -Debug -ErrorAction -ErrorVariable -Identity -ResultSize -Type -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdminAuditLogConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/1c396460-3042-47b5-afab-ecc51feb3de9.json b/RoleDefinitions/1c396460-3042-47b5-afab-ecc51feb3de9.json new file mode 100644 index 000000000..3dd6ccf86 --- /dev/null +++ b/RoleDefinitions/1c396460-3042-47b5-afab-ecc51feb3de9.json @@ -0,0 +1,55 @@ +{ + "id": "1c396460-3042-47b5-afab-ecc51feb3de9", + "description": "This role enables administrators to create and manage distribution groups and distribution group members in an organization.", + "displayName": "Distribution Groups", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DynamicDistributionGroup -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -Alias -BypassModerationFromSendersOrMembers -ConditionalCompany -ConditionalCustomAttribute1 -ConditionalCustomAttribute10 -ConditionalCustomAttribute11 -ConditionalCustomAttribute12 -ConditionalCustomAttribute13 -ConditionalCustomAttribute14 -ConditionalCustomAttribute15 -ConditionalCustomAttribute2 -ConditionalCustomAttribute3 -ConditionalCustomAttribute4 -ConditionalCustomAttribute5 -ConditionalCustomAttribute6 -ConditionalCustomAttribute7 -ConditionalCustomAttribute8 -ConditionalCustomAttribute9 -ConditionalDepartment -ConditionalStateOrProvince -Confirm -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -DirectMembershipOnly -DisplayName -EmailAddresses -ErrorAction -ErrorVariable -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ForceMembershipRefresh -ForceUpgrade -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -Identity -IncludedRecipients -MailTip -MailTipTranslations -ManagedBy -ModeratedBy -ModerationEnabled -Name -Notes -OutBuffer -OutVariable -PhoneticDisplayName -PrimarySmtpAddress -RecipientContainer -RecipientFilter -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -ReportToManagerEnabled -ReportToOriginatorEnabled -RequireSenderAuthenticationEnabled -SendModerationNotifications -SendOofMessageToOriginatorEnabled -SimpleDisplayName -UpdateMemberCount -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DistributionGroup -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -Alias -BccBlocked -BypassModerationFromSendersOrMembers -BypassNestedModerationEnabled -Confirm -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -Description -DisplayName -EmailAddresses -ErrorAction -ErrorVariable -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -ForceUpgrade -GrantSendOnBehalfTo -HiddenFromAddressListsEnabled -HiddenGroupMembershipEnabled -Identity -IgnoreNamingPolicy -MailTip -MailTipTranslations -ManagedBy -MemberDepartRestriction -MemberJoinRestriction -ModeratedBy -ModerationEnabled -Name -OutBuffer -OutVariable -PrimarySmtpAddress -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -ReportToManagerEnabled -ReportToOriginatorEnabled -RequireSenderAuthenticationEnabled -ResetMigrationToUnifiedGroup -RoomList -SendModerationNotifications -SendOofMessageToOriginatorEnabled -SimpleDisplayName -UpdateMemberCount -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -Async -Credential -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -Properties -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Group -Confirm -Description -DisplayName -ErrorAction -ErrorVariable -Identity -IsHierarchicalGroup -ManagedBy -Name -Notes -OutBuffer -OutVariable -PhoneticDisplayName -SeniorityIndex -SimpleDisplayName -Universal -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DistributionGroup -Alias -BccBlocked -BypassNestedModerationEnabled -Confirm -CopyOwnerToMember -Description -DisplayName -ErrorAction -ErrorVariable -HiddenGroupMembershipEnabled -IgnoreNamingPolicy -ManagedBy -MemberDepartRestriction -MemberJoinRestriction -Members -ModeratedBy -ModerationEnabled -Name -Notes -OrganizationalUnit -OutBuffer -OutVariable -PrimarySmtpAddress -RequireSenderAuthenticationEnabled -RoomList -SendModerationNotifications -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -Members -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -DistributionGroupDefaultOU -DistributionGroupNameBlockedWordsList -DistributionGroupNamingPolicy -HierarchicalAddressBookRoot", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DynamicDistributionGroup -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -Member -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroup -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Receive-ExoJob -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -SubJobId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DynamicDistributionGroup -Alias -ConditionalCompany -ConditionalCustomAttribute1 -ConditionalCustomAttribute10 -ConditionalCustomAttribute11 -ConditionalCustomAttribute12 -ConditionalCustomAttribute13 -ConditionalCustomAttribute14 -ConditionalCustomAttribute15 -ConditionalCustomAttribute2 -ConditionalCustomAttribute3 -ConditionalCustomAttribute4 -ConditionalCustomAttribute5 -ConditionalCustomAttribute6 -ConditionalCustomAttribute7 -ConditionalCustomAttribute8 -ConditionalCustomAttribute9 -ConditionalDepartment -ConditionalStateOrProvince -Confirm -DirectMembershipOnly -DisplayName -ErrorAction -ErrorVariable -IncludedRecipients -ModeratedBy -ModerationEnabled -Name -OrganizationalUnit -OutBuffer -OutVariable -PrimarySmtpAddress -RecipientContainer -RecipientFilter -SendModerationNotifications -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -Async -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -Properties -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailUser -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Group -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoJob -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Recursive -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -Member -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/1c5e6e03-502a-4e18-8ae9-7a9b85b834d3.json b/RoleDefinitions/1c5e6e03-502a-4e18-8ae9-7a9b85b834d3.json new file mode 100644 index 000000000..f84bde737 --- /dev/null +++ b/RoleDefinitions/1c5e6e03-502a-4e18-8ae9-7a9b85b834d3.json @@ -0,0 +1,32 @@ +{ + "id": "1c5e6e03-502a-4e18-8ae9-7a9b85b834d3", + "description": "This role enables users to reset their own passwords and administrators to reset users' passwords in an organization.", + "displayName": "Reset Password", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -Identity -PublicFolder -ResetPasswordOnNextLogon", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -Identity -RoomMailboxPassword", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/1c88494a-6b20-4dbf-9590-8571747e0418.json b/RoleDefinitions/1c88494a-6b20-4dbf-9590-8571747e0418.json new file mode 100644 index 000000000..e30772b4b --- /dev/null +++ b/RoleDefinitions/1c88494a-6b20-4dbf-9590-8571747e0418.json @@ -0,0 +1,20 @@ +{ + "id": "1c88494a-6b20-4dbf-9590-8571747e0418", + "description": null, + "displayName": "Communication Compliance Investigation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDomainGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/208f9377-9820-4b5e-889e-d09d0174963b.json b/RoleDefinitions/208f9377-9820-4b5e-889e-d09d0174963b.json new file mode 100644 index 000000000..d43db694f --- /dev/null +++ b/RoleDefinitions/208f9377-9820-4b5e-889e-d09d0174963b.json @@ -0,0 +1,107 @@ +{ + "id": "208f9377-9820-4b5e-889e-d09d0174963b", + "description": "This role enables administrators to manage organization-wide settings. Organization configuration that can be controlled with this role type include the following and more:\r\nWhether MailTips are enabled or disabled for the organization.\r\nThe URL for the managed folder home page.\r\nThe Microsoft Exchange recipient SMTP address and alternate e-mail addresses. \r\nThe resource mailbox property schema configuration.\r\nThe Help URLs for the Exchange Management Console and Outlook Web App.\r\nThis role type doesn't include the permissions included in the OrganizationClientAccess or OrganizationTransportSettings role types.", + "displayName": "Organization Configuration", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantMailFromAddress -ApplicationId -FromAddress -OrganizationId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SmimeConfig -Confirm -Debug -Identity -OWAAllowUserChoiceOfSigningCertificate -OWAAlwaysEncrypt -OWAAlwaysSign -OWABCCEncryptedEmailForking -OWACheckCRLOnSend -OWAClearSign -OWACopyRecipientHeaders -OWACRLConnectionTimeout -OWACRLRetrievalTimeout -OWADisableCRLCheck -OWADLExpansionTimeout -OWAEncryptionAlgorithms -OWAEncryptTemporaryBuffers -OWAForceSMIMEClientUpgrade -OWAIncludeCertificateChainAndRootCertificate -OWAIncludeCertificateChainWithoutRootCertificate -OWAIncludeSMIMECapabilitiesInMessage -OWANoSignOnReply -OWAOnlyUseSmartCard -OWASenderCertificateAttributesToDisplay -OWASignedEmailCertificateInclusion -OWASigningAlgorithms -OWATripleWrapSignedEncryptedMail -OWAUseKeyIdentifier -OWAUseSecondaryProxiesWhenFindingCertificates -SMIMECertificateIssuingCA -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -AcceptedDomainApprovedSendersEnabled -ActionableMessagesExtenalAccessTokenEnabled -ActivityBasedAuthenticationTimeoutEnabled -ActivityBasedAuthenticationTimeoutInterval -ActivityBasedAuthenticationTimeoutWithSingleSignOnEnabled -AppsForOfficeEnabled -AsyncSendEnabled -AuditDisabled -AutodiscoverPartialDirSync -AutoEnableArchiveMailbox -AutoExpandingArchive -AutomaticForcedReadReceiptEnabled -BookingsAddressEntryRestricted -BookingsAuthEnabled -BookingsBlockedWordsEnabled -BookingsCreationOfCustomQuestionsRestricted -BookingsEnabled -BookingsExposureOfStaffDetailsRestricted -BookingsMembershipApprovalRequired -BookingsNamingPolicyEnabled -BookingsNamingPolicyPrefix -BookingsNamingPolicyPrefixEnabled -BookingsNamingPolicySuffix -BookingsNamingPolicySuffixEnabled -BookingsNotesEntryRestricted -BookingsPaymentsEnabled -BookingsPhoneNumberEntryRestricted -BookingsSearchEngineIndexDisabled -BookingsSmsMicrosoftEnabled -BookingsSocialSharingRestricted -CalendarVersionStoreEnabled -ComplianceMLBgdCrawlEnabled -Confirm -ConnectorsActionableMessagesEnabled -ConnectorsEnabled -ConnectorsEnabledForOutlook -ConnectorsEnabledForSharepoint -ConnectorsEnabledForTeams -ConnectorsEnabledForYammer -CustomerLockboxEnabled -DefaultAuthenticationPolicy -DefaultMinutesToReduceLongEventsBy -DefaultMinutesToReduceShortEventsBy -DefaultPublicFolderAgeLimit -DefaultPublicFolderProhibitPostQuota -DirectReportsGroupAutoCreationEnabled -DisablePlusAddressInRecipients -ElcProcessingDisabled -EnableForwardingAddressSyncForMailboxes -EnableOutlookEvents -EndUserDLUpgradeFlowsDisabled -ErrorAction -ErrorVariable -EwsAllowEntourage -EwsAllowList -EwsAllowMacOutlook -EwsAllowOutlook -EwsApplicationAccessPolicy -EwsBlockList -EwsEnabled -EwsOperationAccessPolicyAllowList -EwsOperationAccessPolicyEnabled -ExchangeNotificationEnabled -ExchangeNotificationRecipients -FindTimeAttendeeAuthenticationEnabled -FindTimeAutoScheduleDisabled -FindTimeLockPollForAttendeesEnabled -FindTimeOnlineMeetingOptionDisabled -FocusedInboxOn -HybridRSVPEnabled -IPListBlocked -IsAgendaMailEnabled -LeanPopoutEnabled -LinkPreviewEnabled -MailTipsExternalRecipientsTipsEnabled -MailTipsLargeAudienceThreshold -MaskClientIpInReceivedHeadersEnabled -MatchSenderOrganizerProperties -MessageHighlightsEnabled -MessageRecallAlertRecipientsEnabled -MessageRecallAlertRecipientsReadMessagesOnlyEnabled -MessageRecallEnabled -MessageRecallMaxRecallableAge -MessageRemindersEnabled -MobileAppEducationEnabled -OAuth2ClientProfileEnabled -OnlineMeetingsByDefaultEnabled -OutBuffer -OutlookGifPickerDisabled -OutlookMobileGCCRestrictionsEnabled -OutlookMobileHelpShiftEnabled -OutlookMobileSingleAccountEnabled -OutlookPayEnabled -OutlookTextPredictionDisabled -OutVariable -PerTenantSwitchToESTSEnabled -PostponeRoamingSignaturesUntilLater -PublicFoldersEnabled -PublicFolderShowClientControl -ReadTrackingEnabled -RecallReadMessagesEnabled -RefreshSessionEnabled -RejectDirectSend -RemotePublicFolderMailboxes -SendFromAliasEnabled -SharedDomainEmailAddressFlowEnabled -ShortenEventScopeDefault -SiteMailboxCreationURL -SmtpActionableMessagesEnabled -TwoClickMailPreviewEnabled -UnblockUnsafeSenderPromptEnabled -VisibleMeetingUpdateProperties -WebPushNotificationsDisabled -WebSuggestedRepliesDisabled -WhatIf -WorkspaceTenantEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MeetingInsightsSettings -Debug -Enabled -ErrorAction -ErrorVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MeetingInsightsSettings -Debug -ErrorAction -ErrorVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuthenticationPolicy -AllowLegacyExchangeTokens -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RetrieveEwsOperationAccessPolicy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AuthenticationPolicy -AllowBasicAuthActiveSync -AllowBasicAuthAutodiscover -AllowBasicAuthImap -AllowBasicAuthMapi -AllowBasicAuthOfflineAddressBook -AllowBasicAuthOutlookService -AllowBasicAuthPop -AllowBasicAuthPowershell -AllowBasicAuthReportingWebServices -AllowBasicAuthRest -AllowBasicAuthRpc -AllowBasicAuthSmtp -AllowBasicAuthWebServices -AllowLegacyExchangeTokens -BlockLegacyExchangeTokens -Confirm -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuthenticationPolicy -AllowLegacyExchangeTokens -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SecOpsOverridePolicy -AddSentTo -Comment -Debug -DomainController -Enabled -Force -Identity -RemoveSentTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PhishSimOverridePolicy -Comment -Debug -DomainController -Enabled -Force -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExoSecOpsOverrideRule -Comment -Debug -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SecOpsOverridePolicy -Confirm -Debug -DomainController -ForceDeletion -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PhishSimOverridePolicy -Confirm -Debug -DomainController -ForceDeletion -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoSecOpsOverrideRule -Confirm -Debug -DomainController -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SecOpsOverridePolicy -Comment -DomainController -Enabled -Force -Name -SentTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PhishSimOverridePolicy -Comment -DomainController -Enabled -Force -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ExoSecOpsOverrideRule -Comment -DomainController -Name -Policy -SendTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoSecOpsOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExoPhishSimOverrideRule -AddDomains -AddSenderIpRanges -Comment -Debug -DomainController -Identity -RemoveDomains -RemoveSenderIpRanges", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoPhishSimOverrideRule -Confirm -Debug -DomainController -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ExoPhishSimOverrideRule -Comment -DomainController -Domains -Name -Policy -SenderIpRanges", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoPhishSimOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AvailabilityConfig -AllowedTenantIds -Confirm -ErrorAction -ErrorVariable -OrgWideAccount -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AvailabilityConfig -AllowedTenantIds -Confirm -ErrorAction -ErrorVariable -OrgWideAccount -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CalendarSettings -EnablePreserveDeclinedMeetings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdministrativeUnitExtension -AdministrativeUnits -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceTag -ErrorAction -Identity -IncludingLabelState -PriorityCleanup", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdaptiveScope -AdministrativeUnits -ErrorAction -Identity -LocationTypes", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-LabelProperties -ApplyToUsers -GrantAccessToAllCompanyDomainUsers -GrantAccessToAllUsers -GrantAccessToNoUsers -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-ApplicationData -AppName -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SecOpsOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PhishSimOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalInOutlook -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExternalInOutlook -AllowList -Enabled -Identity", + "(Microsoft.Exchange.Management.Powershell.Support) Set-FocusedInbox -FocusedInboxOn -Identity", + "(Microsoft.Exchange.Management.Powershell.Support) Get-FocusedInbox -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Validate-RetentionRuleQuery -ErrorAction -KqlQueryString", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-MaskingIndex -Add -Force -Identity -Remove -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-ApplicationAccessPolicy -AppId -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ResourceConfig -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResourcePropertySchema -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RegulatoryComplianceUI -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PerimeterConfig -Confirm -GatewayIPAddresses -Identity -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationRelationship -Identity -MailboxMoveCapability -MailboxMovePublishedScopes -OAuthApplicationId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ApplicationAccessPolicy -Confirm -Description -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-CompliancePolicyFileSyncNotification -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AvailabilityConfig -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditConfigurationRule -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditConfigurationPolicy -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ApplicationAccessPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OrganizationRelationship -MailboxMoveCapability -MailboxMovePublishedScopes -OAuthApplicationId", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-CompliancePolicySyncNotification -Identity -SyncChangeInfos -SyncSvcUrl", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AuthenticationPolicy -AllowBasicAuthActiveSync -AllowBasicAuthAutodiscover -AllowBasicAuthImap -AllowBasicAuthLogExport -AllowBasicAuthMapi -AllowBasicAuthOfflineAddressBook -AllowBasicAuthOutlookService -AllowBasicAuthPop -AllowBasicAuthPowershell -AllowBasicAuthReportingWebServices -AllowBasicAuthRest -AllowBasicAuthRpc -AllowBasicAuthSmtp -AllowBasicAuthWebServices -Confirm -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ApplicationAccessPolicy -AccessRight -AppId -Confirm -Description -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PolicyScopeGroupId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewRule -ErrorAction -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -Reviewers -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyV2 -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewActivity -EndDate -ErrorAction -PolicyId -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmimeConfig -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ResourceConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ProtectionAlert -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceTenantRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceTenantPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DevicePolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConfigurationRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConfigurationPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConditionalAccessRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConditionalAccessPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataRetentionReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceTagStorage -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicyFileSyncNotification -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AvailabilityConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfigurationRule -ErrorAction -ErrorVariable -Identity -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfigurationPolicy -ErrorAction -ErrorVariable -Identity -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfig -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ApplicationAccessPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActivityAlert -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-OrganizationCustomization -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/225ed8b3-5788-42e1-95e2-340fd669d717.json b/RoleDefinitions/225ed8b3-5788-42e1-95e2-340fd669d717.json new file mode 100644 index 000000000..fef1fc501 --- /dev/null +++ b/RoleDefinitions/225ed8b3-5788-42e1-95e2-340fd669d717.json @@ -0,0 +1,29 @@ +{ + "id": "225ed8b3-5788-42e1-95e2-340fd669d717", + "description": "This role enables administrator to manage journaling configuration in an organization.", + "displayName": "Journaling", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TransportConfig -JournalingReportNdrTo -JournalMessageExpirationDays -PreventDuplicateJournalingEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-JournalRule -Confirm -ErrorAction -ErrorVariable -Identity -JournalEmailAddress -Name -OutBuffer -OutVariable -Recipient -Scope -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-JournalRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-JournalRule -Confirm -Enabled -ErrorAction -ErrorVariable -JournalEmailAddress -Name -OutBuffer -OutVariable -Recipient -Scope -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JournalRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-JournalRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-JournalRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/2334a158-888a-4352-8ae1-ce29e33655ea.json b/RoleDefinitions/2334a158-888a-4352-8ae1-ce29e33655ea.json new file mode 100644 index 000000000..8129eec70 --- /dev/null +++ b/RoleDefinitions/2334a158-888a-4352-8ae1-ce29e33655ea.json @@ -0,0 +1,23 @@ +{ + "id": "2334a158-888a-4352-8ae1-ce29e33655ea", + "description": "Without a signed-in user: Allows the app to create, read, update, and delete email in all mailboxes as well as send mail as any user. Allows the app to create, read, update, and delete user's mailbox settings in all mailboxes. Allows the app to create, read, update, and delete events of all calendars. Allows the app to create, read, update, and delete all contacts in all mailboxes", + "displayName": "Application Exchange Full Access", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Contacts.ReadWrite", + "Calendars.ReadWrite", + "MailboxSettings.ReadWrite", + "Mail.Send", + "Mail.ReadWrite" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/286a53bf-3d1d-40c3-b198-5b55f17b5e40.json b/RoleDefinitions/286a53bf-3d1d-40c3-b198-5b55f17b5e40.json new file mode 100644 index 000000000..a871dfb77 --- /dev/null +++ b/RoleDefinitions/286a53bf-3d1d-40c3-b198-5b55f17b5e40.json @@ -0,0 +1,19 @@ +{ + "id": "286a53bf-3d1d-40c3-b198-5b55f17b5e40", + "description": "This role enables administrators to define one or more site mailbox provisioning policies and manage site mailboxes in the organization. Administrators assigned this role can manage site mailboxes they don't own.", + "displayName": "Team Mailboxes", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -SiteMailboxCreationURL" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/29232cdf-9323-42fd-ade2-1d097af3e4de.json b/RoleDefinitions/29232cdf-9323-42fd-ade2-1d097af3e4de.json index 1deb0ccce..4562bedf4 100644 --- a/RoleDefinitions/29232cdf-9323-42fd-ade2-1d097af3e4de.json +++ b/RoleDefinitions/29232cdf-9323-42fd-ade2-1d097af3e4de.json @@ -27,6 +27,7 @@ "microsoft.directory/contacts/memberOf/read", "microsoft.directory/contacts/standard/read", "microsoft.directory/groups/hiddenMembers/read", + "microsoft.directory/groups.unified/assignedLabels/update", "microsoft.directory/groups.unified/basic/update", "microsoft.directory/groups.unified/create", "microsoft.directory/groups.unified/delete", diff --git a/RoleDefinitions/2955da17-9592-4415-bb3a-3101fd438ab2.json b/RoleDefinitions/2955da17-9592-4415-bb3a-3101fd438ab2.json new file mode 100644 index 000000000..2781edcc1 --- /dev/null +++ b/RoleDefinitions/2955da17-9592-4415-bb3a-3101fd438ab2.json @@ -0,0 +1,45 @@ +{ + "id": "2955da17-9592-4415-bb3a-3101fd438ab2", + "description": "This role enables administrators to managethe Information Rights Management (IRM) features of Exchange in an organization.", + "displayName": "Information Rights Management", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-IRMConfiguration -AutomaticServiceUpdateEnabled -AzureRMSLicensingEnabled -Confirm -DecryptAttachmentForEncryptOnly -EDiscoverySuperUserEnabled -EnablePdfEncryption -EnablePortalTrackingLogs -ErrorAction -ErrorVariable -Force -Identity -InternalLicensingEnabled -JournalReportDecryptionEnabled -LicensingLocation -OutBuffer -OutVariable -RejectIfRecipientHasNoRights -RMSOnlineKeySharingLocation -SearchEnabled -SimplifiedClientAccessDoNotForwardDisabled -SimplifiedClientAccessEnabled -SimplifiedClientAccessEncryptOnlyDisabled -TransportDecryptionSetting -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TransportRule -ApplyOME -Identity -RemoveOME -RemoveOMEv2 -RemoveRMSAttachmentEncryption", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TransportRule -ApplyOME -RemoveOME -RemoveOMEv2 -RemoveRMSAttachmentEncryption", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-IRMConfiguration -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Recipient -RMSOnline -Sender -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RMSTemplate -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OutlookProtectionRule -ApplyRightsProtectionTemplate -Confirm -ErrorAction -ErrorVariable -Force -FromDepartment -Identity -Name -OutBuffer -OutVariable -Priority -SentTo -SentToScope -UserCanOverride -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OMEMessageRevocation -MessageId -Revoke", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OMEConfiguration -BackgroundColor -Confirm -DisclaimerText -EmailText -ExternalMailExpiryInDays -ExternalMailExpiryInterval -Identity -Image -IntroductionText -OTPEnabled -PortalText -PrivacyStatementUrl -ReadButtonText -SocialIdSignIn", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OutlookProtectionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OMEConfiguration -Confirm -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OutlookProtectionRule -ApplyRightsProtectionTemplate -Confirm -Enabled -ErrorAction -ErrorVariable -Force -FromDepartment -Name -OutBuffer -OutVariable -Priority -SentTo -SentToScope -UserCanOverride -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OMEConfiguration -BackgroundColor -Confirm -DisclaimerText -EmailText -ExternalMailExpiryInDays -ExternalMailExpiryInterval -Identity -Image -IntroductionText -OTPEnabled -PortalText -PrivacyStatementUrl -ReadButtonText -SocialIdSignIn", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutlookProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IRMConfiguration -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-OutlookProtectionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-OutlookProtectionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/2978a8d7-438b-4c0e-91a0-52d1ee72e28b.json b/RoleDefinitions/2978a8d7-438b-4c0e-91a0-52d1ee72e28b.json new file mode 100644 index 000000000..b06abe671 --- /dev/null +++ b/RoleDefinitions/2978a8d7-438b-4c0e-91a0-52d1ee72e28b.json @@ -0,0 +1,344 @@ +{ + "id": "2978a8d7-438b-4c0e-91a0-52d1ee72e28b", + "description": "This role allows partner applications to act on behalf of end users.", + "displayName": "UserApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "AcceptSharedCalendarInvite", + "SetBookingRegionalSettings", + "GetBookingRegionalSettings", + "GetBookingAdminSettings", + "WritePdpFacets", + "ValidateUnifiedGroupProperties", + "ValidateUnifiedGroupAlias", + "UploadPhoto", + "UploadItems", + "UpgradeDistributionGroup", + "UpdateXrmOrganization", + "UpdateXrmDeal", + "UpdateXrmActivityStream", + "UpdateUserConfiguration", + "UpdateUnifiedGroup", + "UpdateTopShelf", + "UpdateSharingInvitation", + "UpdateOutlookFavorite", + "UpdateMeetingLocations", + "UpdateMasterCategoryList", + "UpdateItem", + "UpdateInboxRules", + "UpdateFolder", + "UpdateExtensionUsage", + "UpdateDelegate", + "UpdateClientExtensionNotifications", + "UpdateBookingStaff", + "UpdateBookingServiceOrder", + "UpdateBookingService", + "UpdateBookingCustomer", + "UpdateBookingCustomQuestion", + "UnsubscribeMessage", + "Unsubscribe", + "UnscheduleItem", + "UnpinTeamMailbox", + "UninstallApp", + "TagImContact", + "SyncFolderItems", + "SyncFolderHierarchy", + "SuiteServiceDataWriteOrg", + "SuiteServiceDataWrite", + "SuiteServiceDataRead", + "Subscribe", + "StartXrmSession", + "StartSearchSession", + "ShareSingleXrmActivity", + "SetUserTheme", + "SetUserPhoto", + "SetUserOofSettings", + "SetUserLocale", + "SetUnifiedGroupUserSubscribeState", + "SetUnifiedGroupUnseenData", + "SetUnifiedGroupSenderRestrictions", + "SetUnifiedGroupMembershipState", + "SetUnifiedGroupLastVisitedTime", + "SetUnifiedGroupFavoriteState", + "SetTelephoneAccessFolderEmail", + "SetShardRelevancyData", + "SetProfilePhoto", + "SetPlayOnPhoneDialString", + "SetPeopleInsightsTokens", + "SetOofStatus", + "SetOMEMessageStatus", + "SetNotificationSettings", + "SetModernGroupMembershipState", + "SetMissedCallNotificationEnabled", + "SetImListMigrationCompleted", + "SetImGroup", + "SetClutterState", + "SetClientExtension", + "SetBusinessInformation", + "SetBookingMailboxSBGraphLinking", + "SetBookingMailboxPhoto", + "SetBookingCalendarPublishing", + "SetAggregatedAccount", + "SendItem", + "SendGroupsAppUpsellEmail", + "SendGroupsAppSmsInvite", + "ScheduleItem", + "ScheduleFollowup", + "RouteComplaint", + "RespondToCoauthoringInvitation", + "RespondToCoOrganizerInvitation", + "ResolveNames", + "ResetPIN", + "ReportMessage", + "RemoveUnifiedGroup", + "RemoveImGroup", + "RemoveImContactFromGroup", + "RemoveDistributionGroupFromImList", + "RemoveDelegate", + "RemoveContactFromImList", + "RemoveAggregatedAccount", + "RegisterConsent", + "RefreshSharingFolder", + "RecordCoauthoringInvitationResponse", + "RecordCoOrganizerInvitationResponse", + "RecordBookingPageLinkingAction", + "ReadPdpFacets", + "ProcessSuiteStorage", + "ProcessComplianceOperation", + "PostUnifiedGroupItem", + "PostModernGroupItem", + "PostGroupItem", + "PlayOnPhoneGreeting", + "PlayOnPhone", + "PerformReminderAction", + "PerformInstantSearch", + "NotifyOneDriveSync", + "Notifications_Write", + "NewBookingMailbox", + "MoveItem", + "MoveFolder", + "MaskAutoCompleteRecipient", + "MarkSocialActivityNotificationsAsSeen", + "MarkGroupItemsAsRead", + "MarkAsJunk", + "MarkAllItemsAsRead", + "LogDatapoint", + "LikeItem", + "JoinPrivateUnifiedGroup", + "IsUMEnabled", + "InstallApp", + "HideTag", + "GetXrmOrganization", + "GetXrmDeal", + "GetXrmActivityStream", + "GetWacAttachmentInfo", + "GetUserUnifiedGroups", + "GetUserUnifiedGroup", + "GetUserRetentionPolicyTags", + "GetUserPhoto:GET", + "GetUserPhoto", + "GetUserOofSettings", + "GetUserConfiguration", + "GetUserAvailability", + "GetUnifiedGroupsSettings", + "GetUnifiedGroupUnseenCount", + "GetUnifiedGroupSenderRestrictions", + "GetUnifiedGroupMembershipRequests", + "GetUnifiedGroupMembers", + "GetUnifiedGroupDetails", + "GetUMProperties", + "GetTopShelf", + "GetSuggestedUnifiedGroups", + "GetSuggestedGroupsFromRecipients", + "GetStreamingEvents", + "GetStaffAvailability", + "GetSpecificUserConfiguration", + "GetSocialActivityNotifications", + "GetSharingMetadata", + "GetSharingInvitations", + "GetSharingFolder", + "GetShardRelevancyScore", + "GetShardRelevancyData", + "GetServiceConfiguration", + "GetServerTimeZones", + "GetSearchSuggestions", + "GetSearchResults", + "GetRooms", + "GetRoomLists", + "GetReminders", + "GetPhotoStripForItem", + "GetPhoneCallInformation", + "GetPersonalNotesForPersona", + "GetPersonaPhoto", + "GetPersonaOrganizationHierarchy", + "GetPersonaNotes", + "GetPersona", + "GetPeopleInsightsTokens", + "GetPeopleInsights", + "GetPeopleICommunicateWith", + "GetPasswordExpirationDate", + "GetParcelDeliveryStatus", + "GetOwaUserConfiguration", + "GetOutlookFavorites", + "GetOrganizationHierarchyForPersona", + "GetOAuth1aAuthorizationEndpointInfo", + "GetNotesForPersona", + "GetNextMeetingWithPerson", + "GetNextMeetingWithPeople", + "GetNextMeetingWithHashtag", + "GetMessageTrackingReport", + "GetMeetingParticipantAvailability", + "GetMeetingLocations", + "GetMasterCategoryList", + "GetMailTips", + "GetLastPrivateCatalogUpdate", + "GetItem", + "GetIsFocusedInboxOn", + "GetInsights", + "GetInboxRules", + "GetImItems", + "GetImItemList", + "GetFolder", + "GetFocusedOtherOverrides", + "GetFileItems", + "GetFileAttachment", + "GetEvents", + "GetDlMembersForUnifiedGroup", + "GetDelegate", + "GetConversationItems", + "GetConsumerCalendarSharedInformation", + "GetClutterState", + "GetClientExtension", + "GetChannelEvents", + "GetCallInfo", + "GetCalendarSharedInformation", + "GetCalendarFolders", + "GetBusinessInformation", + "GetBookingSubscriptionInfo", + "GetBookingStatistics", + "GetBookingStaff", + "GetBookingServices", + "GetBookingService", + "GetBookingMailboxes", + "GetBookingMailboxDiagnostics", + "GetBookingCustomQuestionsCommand", + "GetBookingCalendarPublishing", + "GetAvailableCultures", + "GetAttachmentThumbnail", + "GetAttachment", + "GetAppManifests", + "GetAllClientExtensionsNotifications", + "GetAllAttachmentsAsZip", + "GetAggregatedXrmActivities", + "GetAggregatedAccount", + "GetActivityLog", + "FindXrmOrganization", + "FindXrmGraphRelationship", + "FindXrmDeal", + "FindXrmActivityStream", + "FindUnifiedGroups", + "FindTags", + "FindPlaces", + "FindPeople", + "FindMessageTrackingReport", + "FindMeetingTimeCandidates", + "FindItem", + "FindInsights", + "FindFolder", + "FindConversation", + "FindConnectedAccounts", + "FindBookingCustomers", + "FindAvailableMeetingTimes", + "FindAddressListIndexContacts", + "ExportItems", + "ExpandDL", + "ExecuteSearch", + "ExecuteComplianceTask", + "EstablishConsumerGroupMemberSharing", + "EndSearchSession", + "EndInstantSearchSession", + "EmptyFolder", + "DismissUserUnifiedGroupSuggestion", + "DisconnectPhoneCall", + "Disconnect", + "DisableApp", + "DeleteXrmOrganization", + "DeleteXrmGraphRelationship", + "DeleteXrmDeal", + "DeleteXrmActivityStream", + "DeleteUserConfiguration", + "DeleteSharingInvitation", + "DeleteSearchSuggestion", + "DeletePeopleInsightsTokens", + "DeletePdpFacets", + "DeleteOutlookFavorite", + "DeleteItem", + "DeleteFolder", + "DeleteFocusedOtherOverride", + "DeleteConnectedAccount", + "DeleteBookingStaff", + "DeleteBookingService", + "DeleteBookingCustomQuestion", + "DeleteAttachment", + "CreateXrmOrganization", + "CreateXrmGraphRelationship", + "CreateXrmDeal", + "CreateXrmActivityStream", + "CreateUserConfiguration", + "CreateUnifiedMailbox", + "CreateUnifiedGroup", + "CreateSharingInvitation", + "CreatePhotoTask", + "CreateOutlookFavorite", + "CreateOrUpdateFocusedOtherOverride", + "CreateMeetingPoll", + "CreateManagedFolder", + "CreateItem", + "CreateFolderPath", + "CreateFolder", + "CreateConnectedAccount", + "CreateBookingStaff", + "CreateBookingService", + "CreateBookingCustomer", + "CreateBookingCustomQuestionCommand", + "CreateAttachment", + "CreateAndRespondToMeetingByDelegate", + "CopyItem", + "CopyFolder", + "ConvertId", + "ContactPropertySuggestion", + "ConfigureConsumerGroupMemberSharing", + "ChannelUnsubscribe", + "ChannelSubscribe", + "BatchShareExistingXrmActivities", + "ArchiveItem", + "ApplyEventCoauthoringUpdate", + "ApplyEventCoOrganizerUpdate", + "ApplyConversationAction", + "AddTimeZoneSignal", + "AddTag", + "AddPeopleCommunicationSignal", + "AddNewTelUriContactToGroup", + "AddNewImContactToGroup", + "AddImGroup", + "AddImContactToGroup", + "AddEventToMyCalendar", + "AddEntityFeedback", + "AddDistributionGroupToImList", + "AddDelegate", + "AddAggregatedAccount", + "AddActivityLogEntry", + "ActivateTaskFolderSharingInvitation", + "ActivateSharingInvitation" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/29ee6e16-90a6-4efe-95e9-59f69ff216cf.json b/RoleDefinitions/29ee6e16-90a6-4efe-95e9-59f69ff216cf.json new file mode 100644 index 000000000..f0dcc3a31 --- /dev/null +++ b/RoleDefinitions/29ee6e16-90a6-4efe-95e9-59f69ff216cf.json @@ -0,0 +1,55 @@ +{ + "id": "29ee6e16-90a6-4efe-95e9-59f69ff216cf", + "description": "This role enables administrators to migrate mailboxes and mailbox content into or out of a server.", + "displayName": "Migration", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MigrationBatch -AdoptPreexisting -AllowUnknownColumnsInCSV -Analyze -ArchiveDomain -ArchiveOnly -AutoComplete -AutoProvisioning -AutoStart -AvoidMergeOverlap -BadItemLimit -CompleteAfter -Confirm -ContentFilter -ContentFilterLanguage -CSVData -DataFusion -DisableOnCopy -EndpointPartition -ErrorAction -ErrorVariable -ExcludeDumpsters -ExcludeFolders -ForwardingDisposition -GoogleResource -IncludeFolders -IncludeOtherContacts -LargeItemLimit -ManagedGmailTeams -MigrateTasks -MoveOptions -Name -NotificationEmails -OutBuffer -OutVariable -Partition -PointInTimeRecovery -PointInTimeRecoveryProvisionOnly -PrimaryOnly -PublicFolderToUnifiedGroup -RemoveOnCopy -RenamePrimaryCalendar -ReportInterval -Restore -SimplifiedSwitchOver -SkipCalendar -SkipContacts -SkipDelegates -SkipDetails -SkipMail -SkipMerging -SkipMoving -SkipProvisioning -SkipReports -SkipRules -SourceEndpoint -SourcePFPrimaryMailboxGuid -StartAfter -TargetArchiveDatabases -TargetDatabases -TargetDeliveryDomain -TargetEndpoint -TimeZone -UserIds -Users -WarningAction -WarningVariable -WhatIf -WorkflowControlFlags -WorkflowTemplate -XMLData", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -ArchiveGuid -ExchangeGuid -Identity -UnblockForwardSyncPostCrossTenantMigration", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantScanRequestStatistics -EntityPageSize -Filter -IncludeReport -NextPageToken -Partition -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationConfig -AllPartitions -ErrorAction -ErrorVariable -IncludeSimplifiedGmailMigrationData -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantScanRequest -Partition -SingleMessageForSingleEntity -SourceEndpoint", + "(Microsoft.Exchange.Management.PowerShell.E2010) Resume-TenantScanRequest -Partition", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantScanRequest -Partition", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MigrationEndpoint -AcceptUntrustedCertificates -ApplicationId -AppSecretKeyVaultUrl -Authentication -Autodiscover -Compliance -Confirm -Credentials -EmailAddress -ErrorAction -ErrorVariable -ExchangeOutlookAnywhere -ExchangeRemoteMove -ExchangeServer -Gmail -IMAP -MailboxPermission -MaxConcurrentIncrementalSyncs -MaxConcurrentMigrations -Name -NspiServer -OAuthCode -OutBuffer -OutVariable -Partition -Port -PSTImport -PublicFolder -PublicFolderDatabaseServerLegacyDN -PublicFolderToUnifiedGroup -RedirectUri -RemoteServer -RemoteTenant -RPCProxyServer -Security -ServiceAccountKeyFileData -SkipVerification -SourceMailboxLegacyDN -TestMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MigrationBatch -AddUsers -AllowUnknownColumnsInCSV -ApproveSkippedItems -BadItemLimit -CompleteAfter -Confirm -CSVData -ErrorAction -ErrorVariable -Identity -LargeItemLimit -MoveOptions -NotificationEmails -OutBuffer -OutVariable -Partition -ReportInterval -SkipMerging -SkipMoving -SkipReports -StartAfter -SyncNow -Update -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUserStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeCopilotReport -IncludeReport -IncludeSkippedItems -LimitSkippedItemsTo -OutBuffer -OutVariable -Partition -SkipSubscription -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationBatch -DiagnosticInfo -Endpoint -ErrorAction -ErrorVariable -Identity -IncludeReport -LimitErrorsTo -OutBuffer -OutVariable -Partition -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantSettingCrossTenantAccessPolicy -Value", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUser -BatchId -EmailAddress -ErrorAction -ErrorVariable -Identity -IncludeAssociatedUsers -MailboxGuid -OutBuffer -OutVariable -Partition -ResultSize -Status -StatusSummary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-M365CrossTenantAccessPolicy -ObjectId -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-M365CrossTenantAccessPolicy -AuthorizationPolicy -ObjectId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Sync-CrossTenantAccessPolicy -DeleteExistingPoliciesBeforeSync -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Complete-MigrationBatch -CompletePublicFolderMigrationWithDataLoss -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -SyncAndComplete -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MigrationServerAvailability -AcceptUntrustedCertificates -Authentication -Autodiscover -Compliance -Confirm -Credentials -EmailAddress -Endpoint -ErrorAction -ErrorVariable -ExchangeOutlookAnywhere -ExchangeRemoteMove -ExchangeServer -FilePath -Gmail -Imap -MailboxPermission -OutBuffer -OutVariable -Partition -Port -PSTImport -PublicFolder -PublicFolderDatabaseServerLegacyDN -PublicFolderToUnifiedGroup -RemoteServer -RPCProxyServer -Security -ServiceAccountKeyFileData -SourceMailboxLegacyDN -TestMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CrossTenantAccessPolicy -AuthorizationPolicy -Identity", + "(Microsoft.Exchange.Management.Powershell.Support) Set-Clutter -CleanUpClutter -Enable -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Get-Clutter -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-MigrationUser -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-MigrationBatch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-MigrationUser -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-MigrationBatch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -Validate -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Notification -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmails -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MigrationUser -ApproveSkippedItems -BadItemLimit -CompleteAfter -Confirm -ErrorAction -ErrorVariable -Identity -LargeItemLimit -OutBuffer -OutVariable -Partition -StartAfter -SyncNow -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MigrationEndpoint -AcceptUntrustedCertificates -ApplicationId -AppSecretKeyVaultUrl -Authentication -Confirm -Credentials -EmailAddress -ErrorAction -ErrorVariable -ExchangeServer -Identity -MailboxPermission -MaxConcurrentIncrementalSyncs -MaxConcurrentMigrations -NspiServer -OutBuffer -OutVariable -Partition -Port -PublicFolderDatabaseServerLegacyDN -RemoteServer -RPCProxyServer -Security -ServiceAccountKeyFileData -SkipVerification -SourceMailboxLegacyDN -TestMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MigrationConfig -Partition", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MigrationUser -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MigrationEndpoint -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MigrationBatch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Notification -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProcessType -ResultSize -StartDate -Summary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Partition -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationEndpoint -Confirm -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-MigrationReport -Confirm -CsvStream -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Partition -RowCount -StartingRowIndex -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/2a67645f-97c1-48d4-be05-c76116b44197.json b/RoleDefinitions/2a67645f-97c1-48d4-be05-c76116b44197.json new file mode 100644 index 000000000..139374e53 --- /dev/null +++ b/RoleDefinitions/2a67645f-97c1-48d4-be05-c76116b44197.json @@ -0,0 +1,24 @@ +{ + "id": "2a67645f-97c1-48d4-be05-c76116b44197", + "description": "This role will allow users to view and modify their org marketplace apps.", + "displayName": "Org Marketplace Apps", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -AddInOverrides -AllowReadWriteMailbox -AllowSetting -AppState -AppType -Confirm -DefaultStateForUser -DownloadOnly -Enabled -ErrorAction -ErrorVariable -Etoken -Identity -MarketplaceAssetID -MarketplaceCorrelationID -MarketplaceQueryMarket -MarketplaceServicesUrl -MarketplaceUserProfileType -OrganizationApp -OutBuffer -OutVariable -Predecessors -PrivateCatalog -ProvidedTo -UpdateAppState -UserList -Version -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-App -AppType -Confirm -ErrorAction -ErrorVariable -Identity -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-App -Confirm -DefaultStateForUser -Enabled -ErrorAction -ErrorVariable -Force -Identity -Name -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -ProvidedTo -UserList -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-App -ErrorAction -ErrorVariable -Identity -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-App -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-App -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/2f9f4f7e-2d13-427b-adf2-361a1eef7ae8.json b/RoleDefinitions/2f9f4f7e-2d13-427b-adf2-361a1eef7ae8.json new file mode 100644 index 000000000..353e538b7 --- /dev/null +++ b/RoleDefinitions/2f9f4f7e-2d13-427b-adf2-361a1eef7ae8.json @@ -0,0 +1,127 @@ +{ + "id": "2f9f4f7e-2d13-427b-adf2-361a1eef7ae8", + "displayName": "School Administrator", + "description": "School Administrators can manage apps and settings for their groups. They can take remote actions on devices, including remotely locking them, restarting them, and retiring them from management.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "2f9f4f7e-2d13-427b-adf2-361a1eef7ae8", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/AppleDeviceSerialNumbers/Delete", + "Microsoft.Intune/AppleDeviceSerialNumbers/Read", + "Microsoft.Intune/AppleDeviceSerialNumbers/Update", + "Microsoft.Intune/AppleEnrollmentProfiles/Assign", + "Microsoft.Intune/AppleEnrollmentProfiles/Create", + "Microsoft.Intune/AppleEnrollmentProfiles/Delete", + "Microsoft.Intune/AppleEnrollmentProfiles/Read", + "Microsoft.Intune/AppleEnrollmentProfiles/Update", + "Microsoft.Intune/EnrollmentProfiles/EnrollmentTimeMembershipAssign", + "Microsoft.Intune/Audit/Read", + "Microsoft.Intune/DeviceConfigurations/Assign", + "Microsoft.Intune/DeviceConfigurations/Create", + "Microsoft.Intune/DeviceConfigurations/Delete", + "Microsoft.Intune/DeviceConfigurations/Read", + "Microsoft.Intune/DeviceConfigurations/Update", + "Microsoft.Intune/DeviceEnrollmentManagers/Read", + "Microsoft.Intune/DeviceEnrollmentManagers/Update", + "Microsoft.Intune/EnrollmentProgramToken/Create", + "Microsoft.Intune/EnrollmentProgramToken/Delete", + "Microsoft.Intune/EnrollmentProgramToken/Read", + "Microsoft.Intune/EnrollmentProgramToken/Update", + "Microsoft.Intune/ManagedApps/Create", + "Microsoft.Intune/ManagedApps/Delete", + "Microsoft.Intune/ManagedApps/Read", + "Microsoft.Intune/ManagedApps/Update", + "Microsoft.Intune/ManagedDevices/Delete", + "Microsoft.Intune/ManagedDevices/Read", + "Microsoft.Intune/ManagedDevices/Update", + "Microsoft.Intune/ManagedDevices/SetPrimaryUser", + "Microsoft.Intune/MobileApps/Assign", + "Microsoft.Intune/MobileApps/Create", + "Microsoft.Intune/MobileApps/Delete", + "Microsoft.Intune/MobileApps/Read", + "Microsoft.Intune/MobileApps/Update", + "Microsoft.Intune/MobileApps/Relate", + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/RemoteTasks/CleanPC", + "Microsoft.Intune/RemoteTasks/DisableLostMode", + "Microsoft.Intune/RemoteTasks/EnableLostMode", + "Microsoft.Intune/RemoteTasks/LocateDevice", + "Microsoft.Intune/RemoteTasks/PlayLostModeSound", + "Microsoft.Intune/RemoteTasks/RebootNow", + "Microsoft.Intune/RemoteTasks/RemoteLock", + "Microsoft.Intune/RemoteTasks/ResetPasscode", + "Microsoft.Intune/RemoteTasks/Retire", + "Microsoft.Intune/RemoteTasks/SetDeviceName", + "Microsoft.Intune/RemoteTasks/SyncDevice", + "Microsoft.Intune/RemoteTasks/Wipe", + "Microsoft.Intune/RemoteTasks/ActivateDeviceEsim", + "Microsoft.Intune/RemoteTasks/RequestRemoteAssistance", + "Microsoft.Intune/RemoteTasks/InitiateMDMKeyRecovery", + "Microsoft.Intune/RemoteTasks/InitiateDeviceAttestation", + "Microsoft.Intune/RemoteTasks/OnDemandProactiveRemediation", + "Microsoft.Intune/RemoteTasks/ChangeAssignments", + "Microsoft.Intune/Reports/Read", + "Microsoft.Intune/PolicySets/Assign", + "Microsoft.Intune/PolicySets/Create", + "Microsoft.Intune/PolicySets/Delete", + "Microsoft.Intune/PolicySets/Read", + "Microsoft.Intune/PolicySets/Update", + "Microsoft.Intune/RemoteTasks/ConfigurationManagerAction", + "Microsoft.Intune/RemoteTasks/DeviceLogs", + "Microsoft.Intune/AssignmentFilter/Create", + "Microsoft.Intune/AssignmentFilter/Delete", + "Microsoft.Intune/AssignmentFilter/Read", + "Microsoft.Intune/AssignmentFilter/Update", + "Microsoft.Intune/EndpointAnalytics/Create", + "Microsoft.Intune/EndpointAnalytics/Read", + "Microsoft.Intune/EndpointAnalytics/Update", + "Microsoft.Intune/EndpointAnalytics/Delete", + "Microsoft.Intune/MicrosoftStoreForBusiness/Read", + "Microsoft.Intune/MicrosoftStoreForBusiness/Modify", + "Microsoft.Intune/MicrosoftDefenderATP/Read", + "Microsoft.Intune/WindowsEnterpriseCertificate/Read", + "Microsoft.Intune/WindowsEnterpriseCertificate/Modify", + "Microsoft.Intune/CertificateConnector/Read", + "Microsoft.Intune/CertificateConnector/Modify", + "Microsoft.Intune/Customization/Create", + "Microsoft.Intune/Customization/Read", + "Microsoft.Intune/Customization/Update", + "Microsoft.Intune/Customization/Delete", + "Microsoft.Intune/Customization/Assign", + "Microsoft.Intune/TermsAndConditions/Create", + "Microsoft.Intune/TermsAndConditions/Read", + "Microsoft.Intune/TermsAndConditions/Update", + "Microsoft.Intune/TermsAndConditions/Delete", + "Microsoft.Intune/TermsAndConditions/Assign", + "Microsoft.Intune/PartnerDeviceManagement/Read", + "Microsoft.Intune/MobileThreatDefense/Read", + "Microsoft.Intune/DerivedCredentials/Read", + "Microsoft.Intune/RemoteAssistance/Read", + "Microsoft.Intune/RemoteAssistance/Update", + "Microsoft.Intune/RemoteAssistance/ViewReports", + "Microsoft.Intune/RemoteAssistanceApp/ViewScreen", + "Microsoft.Intune/RemoteAssistanceApp/TakeFullControl", + "Microsoft.Intune/RemoteAssistanceApp/Elevation", + "Microsoft.Intune/CloudAttach/ResourceExplorer", + "Microsoft.Intune/CloudAttach/ClientDetails", + "Microsoft.Intune/CloudAttach/Timeline", + "Microsoft.Intune/CloudAttach/Collections", + "Microsoft.Intune/CloudAttach/Applications", + "Microsoft.Intune/CloudAttach/ApplicationActions", + "Microsoft.Intune/CloudAttach/CMPivot", + "Microsoft.Intune/CloudAttach/Scripts", + "Microsoft.Intune/CloudAttach/ScriptActions", + "Microsoft.Intune/CloudAttach/SoftwareUpdates", + "Microsoft.Intune/CloudAttach/EnrollNow", + "Microsoft.Intune/ServiceNow/ViewIncidents" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/31b812e9-3b43-4314-9f35-f4289bac45f7.json b/RoleDefinitions/31b812e9-3b43-4314-9f35-f4289bac45f7.json new file mode 100644 index 000000000..fed2cb2ef --- /dev/null +++ b/RoleDefinitions/31b812e9-3b43-4314-9f35-f4289bac45f7.json @@ -0,0 +1,73 @@ +{ + "id": "31b812e9-3b43-4314-9f35-f4289bac45f7", + "description": "This role enables administrators to create mailboxes, mail users, mail contacts, and regular and dynamic distribution groups in an organization. This role can be combined with MailRecipients roles to create and manage recipients.\r\nThis role type doesn't enable you to mail-enable public folders. Use roles of type MailEnabledPublicFolders to mail-enable public folders. \r\nIf your organization has a split permissions model where recipient creation is performed by a different group than those who perform recipient management, assign the MailRecipientCreation roles to the group that performs recipient creation and the MailRecipients roles to the group that performs recipient management.", + "displayName": "Mail Recipient Creation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DataEncryptionPolicy -AvailabilityKeyAzureKeyID -AvailabilityKeyBlob -AzureKeyIDs -Confirm -Debug -Description -DomainController -Enabled -ErrorAction -ErrorVariable -Force -Identity -Name -OutBuffer -OutVariable -PermanentDataPurgeContact -PermanentDataPurgeReason -PermanentDataPurgeRequested -Refresh -Replace -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HVEAccountSettings -Identity -ReplyTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -Archive -ErrorAction -ErrorVariable -Filter -Identity -InactiveMailboxOnly -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeEmailAddressDisplayNames -IncludeForwardingAddressWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeInactiveMailbox -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SoftDeletedMailbox -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HVEAccountSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailUser -Alias -Confirm -DisplayName -ErrorAction -ErrorVariable -ExternalEmailAddress -FederatedIdentity -FirstName -HVEAccount -ImmutableId -Initials -LastName -LOBAppAccount -MacAttachmentFormat -MailboxRegion -MailboxRegionSuffix -MessageBodyFormat -MessageFormat -MicrosoftOnlineServicesID -ModeratedBy -ModerationEnabled -Name -OrganizationalUnit -OutBuffer -OutVariable -Password -PrimarySmtpAddress -RemotePowerShellEnabled -SendModerationNotifications -UsePreferMessageFormat -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailUser -Anr -ErrorAction -ErrorVariable -Filter -HVEAccount -Identity -LOBAppAccount -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SharedWithMailUser -SoftDeletedMailUser -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Place -AudioDeviceName -Building -Capacity -City -CountryOrRegion -DisplayDeviceName -ErrorAction -ErrorVariable -Floor -FloorLabel -GeoCoordinates -Identity -IsWheelChairAccessible -Label -MTREnabled -ParentId -Phone -PostalCode -State -Street -Tags -VideoDeviceName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-BirthdayCalendar -ForceCreateCalendarGroupEntryInFailure -Identity -Verbose -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-BirthdayCalendar -Identity -Verbose -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroup -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -DomainController -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailUser -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -PermanentlyDelete -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -MailboxName -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleAssignment -AssignmentMethod -ConfigWriteScope -CustomRecipientWriteScope -Delegating -Enabled -ErrorAction -ErrorVariable -Exclusive -ExclusiveRecipientWriteScope -GetEffectiveUsers -Identity -OutBuffer -OutVariable -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientWriteScope -Role -RoleAssignee -RoleAssigneeType -WarningAction -WarningVariable -WritableRecipient", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-BookingMailboxPermission -Identity -Permission -StaffMember", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SchedulingMailbox -Alias -BookingServiceName -BusinessType -Confirm -Culture -DisplayName -ErrorAction -ErrorVariable -GenerateBookingServiceData -Name -NormalizedBusinessType -OrganizationalUnit -OutBuffer -OutVariable -Owner -PrimarySmtpAddress -ReplyToAddress -SkipInitialServiceCreation -TimeZone -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Place -ErrorAction -ErrorVariable -Identity -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BookingMailbox -AccessingUser -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -DomainController -Process -SoftDeletedMailbox", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-Mailbox -Confirm -ErrorAction -ErrorVariable -Force -Identity -Migration -OutBuffer -OutVariable -PermanentlyDelete -PublicFolder -RemoveCNFPublicFolderMailboxPermanently -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Invoke-BirthdayCalendarSync -Identity -Verbose -Whatif", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-Mailbox -ActiveSyncMailboxPolicy -Alias -Archive -Confirm -CopyCustomAttributes -Discovery -DisplayName -EnableRoomMailboxAccount -Equipment -ErrorAction -ErrorVariable -FederatedIdentity -FirstName -Force -HoldForMigration -ImmutableId -InactiveMailbox -Initials -IsExcludedFromServingHierarchy -LastName -MailboxPlan -MailboxRegion -MailboxRegionSuffix -MicrosoftOnlineServicesID -Migration -ModeratedBy -ModerationEnabled -Name -Office -OrganizationalUnit -OutBuffer -OutVariable -Password -Phone -PrimarySmtpAddress -PublicFolder -RemotePowerShellEnabled -RemovedMailbox -ResetPasswordOnNextLogon -ResourceCapacity -RoleAssignmentPolicy -Room -RoomMailboxPassword -Scheduling -SendModerationNotifications -Shared -TargetAllMDBs -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DataEncryptionPolicy -AvailabilityKeyAzureKeyID -AvailabilityKeyBlob -AvailabilityKeyResourceGroupName -AvailabilityKeySubscriptionID -AzureKeyIDs -Confirm -Debug -Description -DomainController -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -ResourceGroupNames -SubscriptionIDs -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Undo-SoftDeletedUnifiedGroup -Confirm -SoftDeletedObject -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Undo-SoftDeletedMailbox -Confirm -DisplayName -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -Password -PublicFolder -SoftDeletedObject -WarningAction -WarningVariable -WhatIf -WindowsLiveID", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DataEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Notification -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmails -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxFolderPermission -AccessRights -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendNotificationToUser -SharingPermissionFlags -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailContact -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-CalendarEvents -CancelOrganizedMeetings -Confirm -Identity -PreviewOnly -QueryStartDate -QueryWindowInDays -Verbose -Whatif", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailContact -Alias -Confirm -DisplayName -ErrorAction -ErrorVariable -ExternalEmailAddress -FirstName -Initials -LastName -MacAttachmentFormat -MessageBodyFormat -MessageFormat -ModeratedBy -ModerationEnabled -Name -OrganizationalUnit -OutBuffer -OutVariable -SendModerationNotifications -UsePreferMessageFormat -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ToolInformation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Version -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SharingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleAssignmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RbacDiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Notification -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProcessType -ResultSize -StartDate -Summary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPlan -AllMailboxPlanReleases -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailContact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-LinkedUser -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressBookPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-JournalArchiving -Identity -PreserveMailUser", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-MailboxLocation -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/3625a550-96bd-47fe-abbc-83c0fb8c2e8d.json b/RoleDefinitions/3625a550-96bd-47fe-abbc-83c0fb8c2e8d.json new file mode 100644 index 000000000..12b1d08b4 --- /dev/null +++ b/RoleDefinitions/3625a550-96bd-47fe-abbc-83c0fb8c2e8d.json @@ -0,0 +1,40 @@ +{ + "id": "3625a550-96bd-47fe-abbc-83c0fb8c2e8d", + "description": "This role enables administrators to manage Client Access settings in an organization.", + "displayName": "Organization Client Access", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-ClientAccessRule -AuthenticationType -Debug -ErrorAction -ErrorVariable -OAuthClaims -OutBuffer -OutVariable -Protocol -RemoteAddress -RemotePort -User -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PartnerApplication -AcceptSecurityIdentifierInformation -AccountType -ActAsPermissions -ApplicationIdentifier -Confirm -Enabled -ErrorAction -ErrorVariable -Identity -LinkedAccount -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ClientAccessRule -Action -AnyOfAuthenticationTypes -AnyOfClientIPAddressesOrRanges -AnyOfProtocols -Confirm -Debug -Enabled -ErrorAction -ErrorVariable -ExceptAnyOfAuthenticationTypes -ExceptAnyOfClientIPAddressesOrRanges -ExceptAnyOfProtocols -ExceptUsernameMatchesAnyOfPatterns -Identity -Name -OutBuffer -OutVariable -Priority -Scope -UsernameMatchesAnyOfPatterns -UserRecipientFilter -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CASMailbox -ActiveSyncAllowedDeviceIDs -ActiveSyncBlockedDeviceIDs -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ActiveSyncOrganizationSettings -AdminMailRecipients -AllowAccessForUnSupportedPlatform -AllowRMSSupportForUnenlightenedApps -Confirm -DefaultAccessLevel -EnableMobileMailboxPolicyWhenCAInplace -ErrorAction -ErrorVariable -Identity -OtaNotificationMailInsert -OutBuffer -OutVariable -TenantAdminPreference -UserMailInsert -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ActiveSyncDeviceAccessRule -AccessLevel -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PartnerApplication -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ClientAccessRule -Confirm -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ActiveSyncDeviceAccessRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PartnerApplication -AcceptSecurityIdentifierInformation -AccountType -ApplicationIdentifier -Confirm -Enabled -ErrorAction -ErrorVariable -LinkedAccount -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ClientAccessRule -Action -AnyOfAuthenticationTypes -AnyOfClientIPAddressesOrRanges -AnyOfProtocols -Confirm -Debug -Enabled -ErrorAction -ErrorVariable -ExceptAnyOfAuthenticationTypes -ExceptAnyOfClientIPAddressesOrRanges -ExceptAnyOfProtocols -ExceptUsernameMatchesAnyOfPatterns -Name -OutBuffer -OutVariable -Priority -Scope -UsernameMatchesAnyOfPatterns -UserRecipientFilter -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ActiveSyncDeviceAccessRule -AccessLevel -Characteristic -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -QueryString -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ToolInformation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Version -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PartnerApplication -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ClientAccessRule -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailboxPlan -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OrganizationalUnit -OutBuffer -OutVariable -ProtocolSettings -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuthServer -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncOrganizationSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceClass -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceAccessRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/379bc284-7c3f-4fba-b332-97e59facc84a.json b/RoleDefinitions/379bc284-7c3f-4fba-b332-97e59facc84a.json new file mode 100644 index 000000000..1ad4e9cb8 --- /dev/null +++ b/RoleDefinitions/379bc284-7c3f-4fba-b332-97e59facc84a.json @@ -0,0 +1,19 @@ +{ + "id": "379bc284-7c3f-4fba-b332-97e59facc84a", + "description": "Allows the app to read events of all calendars without a signed-in user", + "displayName": "Application Calendars.Read", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Calendars.Read" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/388a885a-1803-4237-9c97-6794bf7a05ca.json b/RoleDefinitions/388a885a-1803-4237-9c97-6794bf7a05ca.json new file mode 100644 index 000000000..70976a64a --- /dev/null +++ b/RoleDefinitions/388a885a-1803-4237-9c97-6794bf7a05ca.json @@ -0,0 +1,221 @@ +{ + "id": "388a885a-1803-4237-9c97-6794bf7a05ca", + "description": "This role enables administrators to view all of the non-recipient Exchange configuration settings in an organization. Examples of configuration that are viewable are server configuration, transport configuration, database configuration, and organization-wide configuration. \r\nThis role can be combined with roles associated with the ViewOnlyRecipients role type to create a role group that can view every object in an organization.", + "displayName": "View-Only Configuration", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AccessLabel -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SmimeConfig -Confirm -Debug -Identity -OWAAllowUserChoiceOfSigningCertificate -OWAAlwaysEncrypt -OWAAlwaysSign -OWABCCEncryptedEmailForking -OWACheckCRLOnSend -OWAClearSign -OWACopyRecipientHeaders -OWACRLConnectionTimeout -OWACRLRetrievalTimeout -OWADisableCRLCheck -OWADLExpansionTimeout -OWAEncryptionAlgorithms -OWAEncryptTemporaryBuffers -OWAForceSMIMEClientUpgrade -OWAIncludeCertificateChainAndRootCertificate -OWAIncludeCertificateChainWithoutRootCertificate -OWAIncludeSMIMECapabilitiesInMessage -OWANoSignOnReply -OWAOnlyUseSmartCard -OWASenderCertificateAttributesToDisplay -OWASignedEmailCertificateInclusion -OWASigningAlgorithms -OWATripleWrapSignedEncryptedMail -OWAUseKeyIdentifier -OWAUseSecondaryProxiesWhenFindingCertificates -SMIMECertificateIssuingCA -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationConfig -AllPartitions -ErrorAction -ErrorVariable -IncludeSimplifiedGmailMigrationData -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MeetingInsightsSettings -Debug -ErrorAction -ErrorVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IPv6StatusForAcceptedDomain -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuthenticationPolicy -AllowLegacyExchangeTokens -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmtpDaneInboundStatus -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoInformationBarrierRelationshipTable -Horizontal -NoRelationshipTableVisualResult -Organization", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SecOpsOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PhishSimOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoSecOpsOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoPhishSimOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DnssecStatusForVerifiedDomain -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -SkipDnsValidation -SkipMtaStsValidation -SkipMxValidation -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleAssignment -AssignmentMethod -ConfigWriteScope -CustomRecipientWriteScope -Delegating -Enabled -ErrorAction -ErrorVariable -Exclusive -ExclusiveRecipientWriteScope -GetEffectiveUsers -Identity -OutBuffer -OutVariable -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientWriteScope -Role -RoleAssignee -RoleAssigneeType -WarningAction -WarningVariable -WritableRecipient", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -State -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoInformationBarrierUpgradeImpact -Organization", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationBatch -DiagnosticInfo -Endpoint -ErrorAction -ErrorVariable -Identity -IncludeReport -LimitErrorsTo -OutBuffer -OutVariable -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EtrLimits -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleEntry -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Parameters -PSSnapinName -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdministrativeUnitExtension -AdministrativeUnits -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceTag -ErrorAction -Identity -IncludingLabelState -PriorityCleanup", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdaptiveScope -AdministrativeUnits -ErrorAction -Identity -LocationTypes", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RemoteDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutboundConnector -ErrorAction -ErrorVariable -Identity -IncludeTestModeConnectors -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboundConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Place -ErrorAction -ErrorVariable -Identity -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoInformationBarriersV1Configuration -Organization", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ExoInformationBarriersMultiSegment -Organization", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.Powershell.Support) Test-DlpPolicies -ExecutionMode -FileUniqueId -FileUrl -SendReportTo -SiteId -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoSegmentsSnapshot -All -Organization -ShowTimestampsOnly -Timestamp", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoConnectivityTableSnapshot -All -Organization -ShowTimestampsOnly -Timestamp", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-LabelProperties -ApplyToUsers -GrantAccessToAllCompanyDomainUsers -GrantAccessToAllUsers -GrantAccessToNoUsers -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-M365CrossTenantAccessPolicy -BypassMigrationScenario -PartnerIdentifier -PolicyType -RemoveAuthorizationPolicy", + "(Microsoft.Exchange.Management.Powershell.Support) Test-Message -Confirm -Force -MessageFileData -Recipients -Sender -SendReportTo -TransportRules -UnifiedDLPRules -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUser -BatchId -EmailAddress -ErrorAction -ErrorVariable -Identity -IncludeAssociatedUsers -MailboxGuid -OutBuffer -OutVariable -ResultSize -Status -StatusSummary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-ApplicationData -AppName -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoRecipientsStatus -ErrorAction -ErrorVariable -Organization -OutBuffer -OutVariable -RecipientIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoUsersByIBSegment -Mode -Organization -SegmentId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Check-ExoInformationBarrierSymmetry -Organization", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoInformationBarrierSegment -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ShowFriendlyValues", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoInformationBarrierRelationship -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RecipientId1 -RecipientId2", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoInformationBarrierPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ShowFriendlyValues", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ArcConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPEvaluationRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-M365CrossTenantAccessPolicy -ObjectId -PartnerIdentifier -PolicyType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedConnector -ConnectorId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPBuiltInProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListItems -Allow -Block -Entry -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantinePolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantinePolicyType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EmailTenantSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExternalInOutlook -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalInOutlook -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-TransportRuleCollection -Confirm -ErrorAction -ErrorVariable -Format -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofIntelligenceInsight -AllowedToSpoof -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -IsVIP", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CrossTenantAccessPolicy -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Validate-RetentionRuleQuery -ErrorAction -KqlQueryString", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-OrganizationRelationship -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UserIdentity -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-M365DataAtRestEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DataEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-ClientAccessRule -AuthenticationType -Debug -ErrorAction -ErrorVariable -OAuthClaims -OutBuffer -OutVariable -Protocol -RemoteAddress -RemotePort -User -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-ApplicationAccessPolicy -AppId -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RegulatoryComplianceUI -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ProtectionServicePolicy -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditConfigurationRule -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditConfigurationPolicy -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ProtectionServicePolicy -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMIPGateway -ErrorAction -ErrorVariable -Identity -IncludeSimulator -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMHuntGroup -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMDialPlan -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallSummaryReport -ErrorAction -ErrorVariable -GroupBy -OutBuffer -OutVariable -UMDialPlan -UMIPGateway -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMAutoAttendant -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRulePredicate -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRuleAction -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRule -DlpPolicy -ErrorAction -ErrorVariable -ExcludeConditionActionDetails -Filter -Identity -OutBuffer -OutVariable -ResultSize -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ToolInformation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Version -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewRule -ErrorAction -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -Reviewers -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyV2 -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewActivity -EndDate -ErrorAction -PolicyId -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmimeConfig -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SharingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceStatus -ErrorAction -ErrorVariable -MaintenanceWindowDays -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SendAddress -AddressId -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SearchDocumentFormat -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleGroupMember -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleGroup -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -ShowPartnerLinked -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleAssignmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicyTag -ErrorAction -ErrorVariable -Identity -IncludeSystemTags -Mailbox -OptionalInMailbox -OutBuffer -OutVariable -Types -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RecipientStatisticsReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RbacDiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ProtectionAlert -Debug -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyTipConfig -Action -ErrorAction -ErrorVariable -Identity -Locale -Original -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterMessageTrace -End -Recipient -Sender -Start", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PartnerApplication -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OwaMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutlookProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationRelationship -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnPremisesOrganization -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Notification -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProcessType -ResultSize -StartDate -Summary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUserStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -LimitSkippedItemsTo -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationEndpoint -Confirm -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageCategory -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementScope -ErrorAction -ErrorVariable -Exclusive -Identity -Orphan -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRole -Cmdlet -CmdletParameters -ErrorAction -ErrorVariable -GetChildren -Identity -OutBuffer -OutVariable -Recurse -RoleType -Script -ScriptParameters -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAuditBypassAssociation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-M365DataAtRestEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JournalRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConfiguration -ErrorAction -ErrorVariable -OrganizationGuid -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IRMConfiguration -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HybridMailflowDatacenterIPs -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HybridMailflow -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterPolicy -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedConnectionFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederationTrust -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederationInformation -BypassAdditionalDomainValidation -DomainName -ErrorAction -ErrorVariable -Force -OutBuffer -OutVariable -TrustedHostnames -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederatedOrganizationIdentifier -ErrorAction -ErrorVariable -Identity -IncludeExtendedDomainInfo -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FailedContentIndexDocuments -Archive -Confirm -EndDate -ErrorAction -ErrorCode -ErrorVariable -FailureMode -Identity -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ElevatedAccessAuthorization -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -Requestor -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EOPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpPolicyTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DkimSigningConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceTenantRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceTenantPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DevicePolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConfigurationRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConfigurationPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConditionalAccessRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConditionalAccessPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassificationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassification -ClassificationRuleCollectionIdentity -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConfigAnalyzerPolicyRecommendation -ErrorAction -ErrorVariable -Identity -IsAppliedToDisabled -OutBuffer -OutVariable -RecommendedPolicyType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceTagStorage -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceSecurityFilter -Action -ErrorAction -ErrorVariable -FilterName -OutBuffer -OutVariable -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceBoundary -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ClientAccessRule -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ClassificationRuleCollection -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailboxPlan -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedSenderAddress -SenderAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuthServer -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditLogSearch -CreatedAfter -CreatedBefore -Debug -ErrorAction -ErrorVariable -Identity -ResultSize -Type -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfigurationRule -ErrorAction -ErrorVariable -Identity -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfigurationPolicy -ErrorAction -ErrorVariable -Identity -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfig -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AtpPolicyForO365 -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ApplicationAccessPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-App -ErrorAction -ErrorVariable -Identity -Mailbox -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiSpoofingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishPolicy -Advanced -ErrorAction -ErrorVariable -Identity -Impersonation -OutBuffer -OutVariable -Spoof -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdministrativeUnit -Debug -DisplayName -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdminAuditLogConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressBookPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActivityAlert -Debug -DomainController -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncOrganizationSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceClass -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceAccessRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-UMCallDataRecord -ClientStream -Confirm -Date -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UMDialPlan -UMIPGateway -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/39653fe4-646e-43be-9411-de679f24f069.json b/RoleDefinitions/39653fe4-646e-43be-9411-de679f24f069.json new file mode 100644 index 000000000..a61b3bc3e --- /dev/null +++ b/RoleDefinitions/39653fe4-646e-43be-9411-de679f24f069.json @@ -0,0 +1,33 @@ +{ + "id": "39653fe4-646e-43be-9411-de679f24f069", + "description": "This role enables individual users to create, view, and modify their text messaging settings.", + "displayName": "MyTextMessaging", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-InboxRule -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-InboxRule -Identity -Mailbox", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailbox -Identity -UMSMSNotificationOption", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TextMessagingAccount -Confirm -CountryRegionId -ErrorAction -ErrorVariable -Identity -IgnoreDefaultScope -MobileOperatorId -NotificationPhoneNumber -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SweepRule -Identity -KeepForDays -KeepLatest -Mailbox -Name -Provider", + "(Microsoft.Exchange.Management.PowerShell.E2010) Send-TextMessagingVerificationCode -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SweepRule -KeepForDays -KeepLatest -Name -Provider", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TextMessagingAccount -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Compare-TextMessagingVerificationCode -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -VerificationCode -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-TextMessagingAccount -Confirm -ErrorAction -ErrorVariable -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/3a2c62db-5318-420d-8d74-23affee5d9d5.json b/RoleDefinitions/3a2c62db-5318-420d-8d74-23affee5d9d5.json index 31e15290d..9dbe42daa 100644 --- a/RoleDefinitions/3a2c62db-5318-420d-8d74-23affee5d9d5.json +++ b/RoleDefinitions/3a2c62db-5318-420d-8d74-23affee5d9d5.json @@ -38,6 +38,7 @@ "microsoft.directory/devices/registeredOwners/update", "microsoft.directory/devices/registeredUsers/update", "microsoft.directory/groups/hiddenMembers/read", + "microsoft.directory/groups.security/assignedLabels/update", "microsoft.directory/groups.security/basic/update", "microsoft.directory/groups.security/classification/update", "microsoft.directory/groups.security/create", diff --git a/RoleDefinitions/3bf71dc9-a275-4916-88d5-c316988ac3c5.json b/RoleDefinitions/3bf71dc9-a275-4916-88d5-c316988ac3c5.json new file mode 100644 index 000000000..5eb779e9c --- /dev/null +++ b/RoleDefinitions/3bf71dc9-a275-4916-88d5-c316988ac3c5.json @@ -0,0 +1,20 @@ +{ + "id": "3bf71dc9-a275-4916-88d5-c316988ac3c5", + "description": "", + "displayName": "MyPersonalInformation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": false, + "templateId": "tplantcomau.onmicrosoft.com\\MyContactInformation", + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -HomePhone -Identity -WebPage" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/4173d891-0777-4a69-a0cc-856d2436b79e.json b/RoleDefinitions/4173d891-0777-4a69-a0cc-856d2436b79e.json new file mode 100644 index 000000000..8023c0c84 --- /dev/null +++ b/RoleDefinitions/4173d891-0777-4a69-a0cc-856d2436b79e.json @@ -0,0 +1,22 @@ +{ + "id": "4173d891-0777-4a69-a0cc-856d2436b79e", + "description": "This role enables administrators to manage email address policies in an organization.", + "displayName": "E-Mail Address Policies", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) New-EmailAddressPolicy -Confirm -EnabledEmailAddressTemplates -EnabledPrimarySMTPAddressTemplate -ErrorAction -ErrorVariable -IncludeSchedulingMailboxRecipients -IncludeUnifiedGroupRecipients -ManagedByFilter -Name -OutBuffer -OutVariable -Priority -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EmailAddressPolicy -Confirm -EnabledEmailAddressTemplates -EnabledPrimarySMTPAddressTemplate -ErrorAction -ErrorVariable -ForceUpgrade -Identity -Name -OutBuffer -OutVariable -Priority -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-EmailAddressPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EmailAddressPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/421e42de-8ef3-448e-b9b7-07ce9b94771e.json b/RoleDefinitions/421e42de-8ef3-448e-b9b7-07ce9b94771e.json new file mode 100644 index 000000000..0560ab47d --- /dev/null +++ b/RoleDefinitions/421e42de-8ef3-448e-b9b7-07ce9b94771e.json @@ -0,0 +1,41 @@ +{ + "id": "421e42de-8ef3-448e-b9b7-07ce9b94771e", + "description": "This role allows Microsoft Office extension applications to access user mailbox.", + "displayName": "OfficeExtensionApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "UpdateItem", + "UpdateFolder", + "SendItem", + "ResolveNames", + "ReportMessage", + "ProcessComplianceOperation", + "MoveItem", + "MarkAsJunk", + "GetUserConfiguration", + "GetUserAvailability", + "GetItem", + "GetFolder", + "GetFileAttachment", + "GetConversationItems", + "FindPeople", + "FindMeetingTimeCandidates", + "FindItem", + "FindFolder", + "FindConversation", + "ExpandDL", + "CreateItem", + "CreateFolder", + "CopyItem" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/44dc2ded-fa82-4ee1-93a0-7831c52f9adf.json b/RoleDefinitions/44dc2ded-fa82-4ee1-93a0-7831c52f9adf.json new file mode 100644 index 000000000..1d19723bd --- /dev/null +++ b/RoleDefinitions/44dc2ded-fa82-4ee1-93a0-7831c52f9adf.json @@ -0,0 +1,156 @@ +{ + "id": "44dc2ded-fa82-4ee1-93a0-7831c52f9adf", + "description": "This role enables administrators to manage Data Loss Prevention (DLP) settings in the organization.", + "displayName": "Data Loss Prevention", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficATPReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -NumberOfRows -OutBuffer -OutVariable -Page -PageSize -PivotBy -ProbeTag -StartDate -SummarizeBy -ThreatClassification -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetailV2 -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceV2 -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -ResultSize -SenderAddress -StartDate -StartingRecipientAddress -Status -Subject -SubjectFilterType -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TDPReport -EndDate -ErrorAction -ErrorVariable -HVEAccountAddress -OutBuffer -OutVariable -ProbeTag -ReportType -ResultSize -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantRecipientLimitInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuotaEligibility -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-LabelConfig -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Scenario -UserPrincipalName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionInfo -BlockingScenario -Details -NumberOfDays", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EtrLimits -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DcsScenarios -Confirm -ErrorAction -ErrorVariable -FileData -InputJson -OutBuffer -OutVariable -Scenario -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-HistoricalSearch -BlockStatus -CompressFile -ConnectorType -DeliveryStatus -Direction -DLPPolicy -EncryptionTemplate -EncryptionType -EndDate -ErrorAction -ErrorVariable -Locale -MessageID -NetworkMessageID -NotifyAddress -OriginalClientIP -OutBuffer -OutVariable -RecipientAddress -ReportTitle -ReportType -SenderAddress -SmtpSecurityError -StartDate -TLSUsed -TransportRule -Url -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.Powershell.Support) Test-DlpPolicies -ExecutionMode -FileUniqueId -FileUrl -SendReportTo -SiteId -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DetailZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Test-Message -Confirm -Force -MessageFileData -Recipients -Sender -SendReportTo -TransportRules -UnifiedDLPRules -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AggregateZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DataClassification -ClassificationNames -Confirm -ErrorAction -ErrorVariable -FileExtension -OutBuffer -OutVariable -TestTextExtractionResults -TextToClassify -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoDetailReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoAggregateReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TransportRule -ActivationDate -AdComparisonAttribute -AdComparisonOperator -AddManagerAsRecipientType -AddToRecipients -AnyOfCcHeader -AnyOfCcHeaderMemberOf -AnyOfRecipientAddressContainsWords -AnyOfRecipientAddressMatchesPatterns -AnyOfToCcHeader -AnyOfToCcHeaderMemberOf -AnyOfToHeader -AnyOfToHeaderMemberOf -ApplyClassification -ApplyHtmlDisclaimerFallbackAction -ApplyHtmlDisclaimerLocation -ApplyHtmlDisclaimerText -ApplyOME -ApplyRightsProtectionCustomizationTemplate -ApplyRightsProtectionTemplate -AttachmentContainsWords -AttachmentExtensionMatchesWords -AttachmentHasExecutableContent -AttachmentIsPasswordProtected -AttachmentIsUnsupported -AttachmentMatchesPatterns -AttachmentNameMatchesPatterns -AttachmentProcessingLimitExceeded -AttachmentPropertyContainsWords -AttachmentSizeOver -BetweenMemberOf1 -BetweenMemberOf2 -BlindCopyTo -Comments -Confirm -ContentCharacterSetContainsWords -CopyTo -DeleteMessage -Disconnect -DlpPolicy -ErrorAction -ErrorVariable -ExceptIfAdComparisonAttribute -ExceptIfAdComparisonOperator -ExceptIfAnyOfCcHeader -ExceptIfAnyOfCcHeaderMemberOf -ExceptIfAnyOfRecipientAddressContainsWords -ExceptIfAnyOfRecipientAddressMatchesPatterns -ExceptIfAnyOfToCcHeader -ExceptIfAnyOfToCcHeaderMemberOf -ExceptIfAnyOfToHeader -ExceptIfAnyOfToHeaderMemberOf -ExceptIfAttachmentContainsWords -ExceptIfAttachmentExtensionMatchesWords -ExceptIfAttachmentHasExecutableContent -ExceptIfAttachmentIsPasswordProtected -ExceptIfAttachmentIsUnsupported -ExceptIfAttachmentMatchesPatterns -ExceptIfAttachmentNameMatchesPatterns -ExceptIfAttachmentProcessingLimitExceeded -ExceptIfAttachmentPropertyContainsWords -ExceptIfAttachmentSizeOver -ExceptIfBetweenMemberOf1 -ExceptIfBetweenMemberOf2 -ExceptIfContentCharacterSetContainsWords -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfFromAddressMatchesPatterns -ExceptIfFromMemberOf -ExceptIfFromScope -ExceptIfHasClassification -ExceptIfHasNoClassification -ExceptIfHasSenderOverride -ExceptIfHeaderContainsMessageHeader -ExceptIfHeaderContainsWords -ExceptIfHeaderMatchesMessageHeader -ExceptIfHeaderMatchesPatterns -ExceptIfManagerAddresses -ExceptIfManagerForEvaluatedUser -ExceptIfMessageContainsAllDataClassifications -ExceptIfMessageContainsDataClassifications -ExceptIfMessageSizeOver -ExceptIfMessageTypeMatches -ExceptIfRecipientADAttributeContainsWords -ExceptIfRecipientADAttributeMatchesPatterns -ExceptIfRecipientAddressContainsWords -ExceptIfRecipientAddressMatchesPatterns -ExceptIfRecipientDomainIs -ExceptIfRecipientInSenderList -ExceptIfSCLOver -ExceptIfSenderADAttributeContainsWords -ExceptIfSenderADAttributeMatchesPatterns -ExceptIfSenderDomainIs -ExceptIfSenderInRecipientList -ExceptIfSenderIpRanges -ExceptIfSenderManagementRelationship -ExceptIfSentTo -ExceptIfSentToMemberOf -ExceptIfSentToScope -ExceptIfSubjectContainsWords -ExceptIfSubjectMatchesPatterns -ExceptIfSubjectOrBodyContainsWords -ExceptIfSubjectOrBodyMatchesPatterns -ExceptIfWithImportance -ExpiryDate -From -FromAddressContainsWords -FromAddressMatchesPatterns -FromMemberOf -FromScope -GenerateIncidentReport -GenerateNotification -HasClassification -HasNoClassification -HasSenderOverride -HeaderContainsMessageHeader -HeaderContainsWords -HeaderMatchesMessageHeader -HeaderMatchesPatterns -Identity -IncidentReportContent -LogEventText -ManagerAddresses -ManagerForEvaluatedUser -MessageContainsAllDataClassifications -MessageContainsDataClassifications -MessageSizeOver -MessageTypeMatches -Mode -ModerateMessageByManager -ModerateMessageByUser -Name -NotifySender -OutBuffer -OutVariable -PrependSubject -Priority -Quarantine -RecipientADAttributeContainsWords -RecipientADAttributeMatchesPatterns -RecipientAddressContainsWords -RecipientAddressMatchesPatterns -RecipientAddressType -RecipientDomainIs -RecipientInSenderList -RedirectMessageTo -RejectMessageEnhancedStatusCode -RejectMessageReasonText -RemoveHeader -RemoveOME -RemoveOMEv2 -RemoveRMSAttachmentEncryption -RouteMessageOutboundConnector -RouteMessageOutboundRequireTls -RuleErrorAction -RuleSubType -SCLOver -SenderADAttributeContainsWords -SenderADAttributeMatchesPatterns -SenderAddressLocation -SenderDomainIs -SenderInRecipientList -SenderIpRanges -SenderManagementRelationship -SentTo -SentToMemberOf -SentToScope -SetAuditSeverity -SetHeaderName -SetHeaderValue -SetSCL -SmtpRejectMessageRejectStatusCode -SmtpRejectMessageRejectText -StopRuleProcessing -SubjectContainsWords -SubjectMatchesPatterns -SubjectOrBodyContainsWords -SubjectOrBodyMatchesPatterns -WarningAction -WarningVariable -WhatIf -WithImportance", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TransportRule -ActivationDate -AdComparisonAttribute -AdComparisonOperator -AddManagerAsRecipientType -AddToRecipients -AnyOfCcHeader -AnyOfCcHeaderMemberOf -AnyOfRecipientAddressContainsWords -AnyOfRecipientAddressMatchesPatterns -AnyOfToCcHeader -AnyOfToCcHeaderMemberOf -AnyOfToHeader -AnyOfToHeaderMemberOf -ApplyClassification -ApplyHtmlDisclaimerFallbackAction -ApplyHtmlDisclaimerLocation -ApplyHtmlDisclaimerText -ApplyOME -ApplyRightsProtectionCustomizationTemplate -ApplyRightsProtectionTemplate -AttachmentContainsWords -AttachmentExtensionMatchesWords -AttachmentHasExecutableContent -AttachmentIsPasswordProtected -AttachmentIsUnsupported -AttachmentMatchesPatterns -AttachmentNameMatchesPatterns -AttachmentProcessingLimitExceeded -AttachmentPropertyContainsWords -AttachmentSizeOver -BetweenMemberOf1 -BetweenMemberOf2 -BlindCopyTo -Comments -Confirm -ContentCharacterSetContainsWords -CopyTo -DeleteMessage -Disconnect -DlpPolicy -Enabled -ErrorAction -ErrorVariable -ExceptIfAdComparisonAttribute -ExceptIfAdComparisonOperator -ExceptIfAnyOfCcHeader -ExceptIfAnyOfCcHeaderMemberOf -ExceptIfAnyOfRecipientAddressContainsWords -ExceptIfAnyOfRecipientAddressMatchesPatterns -ExceptIfAnyOfToCcHeader -ExceptIfAnyOfToCcHeaderMemberOf -ExceptIfAnyOfToHeader -ExceptIfAnyOfToHeaderMemberOf -ExceptIfAttachmentContainsWords -ExceptIfAttachmentExtensionMatchesWords -ExceptIfAttachmentHasExecutableContent -ExceptIfAttachmentIsPasswordProtected -ExceptIfAttachmentIsUnsupported -ExceptIfAttachmentMatchesPatterns -ExceptIfAttachmentNameMatchesPatterns -ExceptIfAttachmentProcessingLimitExceeded -ExceptIfAttachmentPropertyContainsWords -ExceptIfAttachmentSizeOver -ExceptIfBetweenMemberOf1 -ExceptIfBetweenMemberOf2 -ExceptIfContentCharacterSetContainsWords -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfFromAddressMatchesPatterns -ExceptIfFromMemberOf -ExceptIfFromScope -ExceptIfHasClassification -ExceptIfHasNoClassification -ExceptIfHasSenderOverride -ExceptIfHeaderContainsMessageHeader -ExceptIfHeaderContainsWords -ExceptIfHeaderMatchesMessageHeader -ExceptIfHeaderMatchesPatterns -ExceptIfManagerAddresses -ExceptIfManagerForEvaluatedUser -ExceptIfMessageContainsAllDataClassifications -ExceptIfMessageContainsDataClassifications -ExceptIfMessageSizeOver -ExceptIfMessageTypeMatches -ExceptIfRecipientADAttributeContainsWords -ExceptIfRecipientADAttributeMatchesPatterns -ExceptIfRecipientAddressContainsWords -ExceptIfRecipientAddressMatchesPatterns -ExceptIfRecipientDomainIs -ExceptIfRecipientInSenderList -ExceptIfSCLOver -ExceptIfSenderADAttributeContainsWords -ExceptIfSenderADAttributeMatchesPatterns -ExceptIfSenderDomainIs -ExceptIfSenderInRecipientList -ExceptIfSenderIpRanges -ExceptIfSenderManagementRelationship -ExceptIfSentTo -ExceptIfSentToMemberOf -ExceptIfSentToScope -ExceptIfSubjectContainsWords -ExceptIfSubjectMatchesPatterns -ExceptIfSubjectOrBodyContainsWords -ExceptIfSubjectOrBodyMatchesPatterns -ExceptIfWithImportance -ExpiryDate -From -FromAddressContainsWords -FromAddressMatchesPatterns -FromMemberOf -FromScope -GenerateIncidentReport -GenerateNotification -HasClassification -HasNoClassification -HasSenderOverride -HeaderContainsMessageHeader -HeaderContainsWords -HeaderMatchesMessageHeader -HeaderMatchesPatterns -IncidentReportContent -LogEventText -ManagerAddresses -ManagerForEvaluatedUser -MessageContainsAllDataClassifications -MessageContainsDataClassifications -MessageSizeOver -MessageTypeMatches -Mode -ModerateMessageByManager -ModerateMessageByUser -Name -NotifySender -OutBuffer -OutVariable -PrependSubject -Priority -Quarantine -RecipientADAttributeContainsWords -RecipientADAttributeMatchesPatterns -RecipientAddressContainsWords -RecipientAddressMatchesPatterns -RecipientAddressType -RecipientDomainIs -RecipientInSenderList -RedirectMessageTo -RejectMessageEnhancedStatusCode -RejectMessageReasonText -RemoveHeader -RemoveOME -RemoveOMEv2 -RemoveRMSAttachmentEncryption -RouteMessageOutboundConnector -RouteMessageOutboundRequireTls -RuleErrorAction -RuleSubType -SCLOver -SenderADAttributeContainsWords -SenderADAttributeMatchesPatterns -SenderAddressLocation -SenderDomainIs -SenderInRecipientList -SenderIpRanges -SenderManagementRelationship -SentTo -SentToMemberOf -SentToScope -SetAuditSeverity -SetHeaderName -SetHeaderValue -SetSCL -SmtpRejectMessageRejectStatusCode -SmtpRejectMessageRejectText -StopRuleProcessing -SubjectContainsWords -SubjectMatchesPatterns -SubjectOrBodyContainsWords -SubjectOrBodyMatchesPatterns -UseLegacyRegex -WarningAction -WarningVariable -WhatIf -WithImportance", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReportSeries -AggregateBy -ConnectorIds -Domain -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -GroupByFields -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-TransportRuleCollection -Confirm -ErrorAction -ErrorVariable -Format -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -Identity -IncludeDLP -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleID -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ProtectionServicePolicy -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PolicyTipConfig -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Value -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OMEMessageRevocation -MessageId -Revoke", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OMEConfiguration -BackgroundColor -Confirm -DisclaimerText -EmailText -ExternalMailExpiryInDays -ExternalMailExpiryInterval -Identity -Image -IntroductionText -OTPEnabled -PortalText -PrivacyStatementUrl -ReadButtonText -SocialIdSignIn", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DlpPolicy -Confirm -Description -ErrorAction -ErrorVariable -Identity -Mode -Name -OutBuffer -OutVariable -State -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DataClassification -Confirm -Description -ErrorAction -ErrorVariable -Fingerprints -Identity -IsDefault -Locale -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ClassificationRuleCollection -Confirm -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TransportRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ReportSchedule -ErrorAction -ErrorVariable -Identity -IncludeDLP -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PolicyTipConfig -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OMEConfiguration -Confirm -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DlpPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DataClassification -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-CompliancePolicySyncNotification -Confirm -Force -Identity -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-CompliancePolicyFileSyncNotification -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ClassificationRuleCollection -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -IncludeDLP -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ProtectionServicePolicy -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PolicyTipConfig -Confirm -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -Value -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OMEConfiguration -BackgroundColor -Confirm -DisclaimerText -EmailText -ExternalMailExpiryInDays -ExternalMailExpiryInterval -Identity -Image -IntroductionText -OTPEnabled -PortalText -PrivacyStatementUrl -ReadButtonText -SocialIdSignIn", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-Fingerprint -Confirm -Description -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DlpPolicy -Confirm -Description -ErrorAction -ErrorVariable -Mode -Name -OutBuffer -OutVariable -Parameters -State -Template -TemplateData -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DataClassification -ClassificationRuleCollectionIdentity -Confirm -Description -ErrorAction -ErrorVariable -Fingerprints -Locale -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-CompliancePolicySyncNotification -Confirm -Force -FullSync -Identity -SyncChangeInfos -SyncNow -SyncSvcUrl -Verbose -WarningVariable -WhatIf -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ClassificationRuleCollection -Confirm -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-TransportRuleCollection -Confirm -ErrorAction -ErrorVariable -FileData -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-DlpPolicyCollection -Confirm -ErrorAction -ErrorVariable -FileData -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRulePredicate -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRuleAction -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRule -DlpPolicy -ErrorAction -ErrorVariable -ExcludeConditionActionDetails -Filter -Identity -OutBuffer -OutVariable -ResultSize -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatSummary -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatProfileDetails -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProtectionStatusFilter -SenderDomainFilter -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatInstances -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PageSize -ProtectionStatusFilter -SenderDomainFilter -StartPage -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatDetails -Base64FileHash -EndTime -ErrorAction -ErrorVariable -FileHash -OutBuffer -OutVariable -StartTime -ThreatType -UserPrincipalName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignProfile -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignIndustries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignCountries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticle -ArticleURL -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SubmissionCategoryReport -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofMailReport -Action -Direction -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityReport -AggregateBy -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityDetailsReport -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Sender -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksDetailReport -Action -AppNameList -Domain -EndDate -Page -PageSize -RecipientAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksAggregateReport -Action -AppNameList -EndDate -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SCInsights -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionEvent -AllStatus -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportScheduleList -ErrorAction -ErrorVariable -IncludeDLP -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSchedule -ErrorAction -ErrorVariable -Identity -IncludeDLP -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportExecutionInstance -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyTipConfig -Action -ErrorAction -ErrorVariable -Identity -Locale -Original -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetail -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrace -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -Status -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -ErrorAction -ErrorVariable -Identity -IncludeLocales -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficTopReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficSummaryReport -Category -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficPolicyReport -Action -AggregateBy -Direction -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFlowStatusReport -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFilterListReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -SelectionTarget -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailTransportRuleReport -Action -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEvaluationModeReport -ConnectorId -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailDlpPolicyReport -Action -Direction -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailATPReport -DataSource -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -IsV2Report -MalwareName -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportSummary -Action -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportDetails -Action -AggregateBy -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReport -AggregateBy -ConnectorId -Direction -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSiDetectionsReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -SensitiveType -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpPolicyTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpIncidentDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetectionsReport -Action -AggregateBy -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -SummarizeBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassificationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassification -ClassificationRuleCollectionIdentity -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserDetailReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserAggregateReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicySyncNotification -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicyFileSyncNotification -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ClassificationRuleCollection -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionTrafficReport -Action -AggregateBy -Direction -DisplayBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MalwareName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentReport -Action -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentDetail -Action -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPTotalTrafficReport -Action -AggregateBy -Direction -Domain -DurationDays -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-DlpPolicyCollection -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-TransportRule -Confirm -ErrorAction -ErrorVariable -Identity -Mode -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-TransportRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/45f8f423-fb45-4884-bfb8-6ee8276220ae.json b/RoleDefinitions/45f8f423-fb45-4884-bfb8-6ee8276220ae.json new file mode 100644 index 000000000..b7c7512ed --- /dev/null +++ b/RoleDefinitions/45f8f423-fb45-4884-bfb8-6ee8276220ae.json @@ -0,0 +1,263 @@ +{ + "id": "45f8f423-fb45-4884-bfb8-6ee8276220ae", + "description": "Allows viewing and editing configuration and reports for Security features.", + "displayName": "Security Admin", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficATPReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -NumberOfRows -OutBuffer -OutVariable -Page -PageSize -PivotBy -ProbeTag -StartDate -SummarizeBy -ThreatClassification -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetailV2 -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceV2 -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -ResultSize -SenderAddress -StartDate -StartingRecipientAddress -Status -Subject -SubjectFilterType -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TDPReport -EndDate -ErrorAction -ErrorVariable -HVEAccountAddress -OutBuffer -OutVariable -ProbeTag -ReportType -ResultSize -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantRecipientLimitInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessage -Confirm -Direction -Domain -EndExpiresDate -EndReceivedDate -EntityType -ErrorAction -ErrorVariable -Identity -IncludeMessagesFromBlockedSenderAddress -MessageId -MoveToQuarantineAdminActionTakenBy -MoveToQuarantineApprovalId -MyItems -OutBuffer -OutVariable -Page -PageSize -PolicyName -PolicyTypes -QuarantineTypes -RecipientAddress -RecipientTag -ReleaseStatus -Reported -SearchOnlyDeletedMessages -SenderAddress -StartExpiresDate -StartReceivedDate -Subject -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Delete-QuarantineMessage -Confirm -Debug -DomainController -EntityType -ErrorAction -ErrorVariable -HardDelete -Identities -Identity -OutBuffer -OutVariable -RecipientAddress -Undelete -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SmtpDaneInbound -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SmtpDaneInbound -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-DnssecForVerifiedDomain -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-DnssecForVerifiedDomain -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IPv6StatusForAcceptedDomain -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-IPv6ForAcceptedDomain -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-IPv6ForAcceptedDomain -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmtpDaneInboundStatus -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -Ids -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -LogExtraDetails -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -SubmissionID -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-QuarantinePermissions -Confirm -Debug -Description -DomainController -ErrorAction -ErrorVariable -Force -LastModifiedTime -OutBuffer -OutVariable -PermissionToAllowSender -PermissionToBlockSender -PermissionToDelete -PermissionToDownload -PermissionToPreview -PermissionToRelease -PermissionToRequestRelease -PermissionToViewHeader -QuarantinePermissionsObject -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AntiPhishPolicy -AdminDisplayName -AuthenticationFailAction -Confirm -DmarcQuarantineAction -DmarcRejectAction -EnableAntiSpoofEnforcement -Enabled -EnableFirstContactSafetyTips -EnableMailboxIntelligence -EnableMailboxIntelligenceProtection -EnableOrganizationDomainsProtection -EnableSimilarDomainsSafetyTips -EnableSimilarUsersSafetyTips -EnableSpoofIntelligence -EnableSuspiciousSafetyTip -EnableTargetedDomainsProtection -EnableTargetedUserProtection -EnableUnauthenticatedSender -EnableUnusualCharactersSafetyTips -EnableViaTag -ErrorAction -ErrorVariable -ExcludedDomains -ExcludedSenders -ExcludedSubDomains -HonorDmarcPolicy -Identity -ImpersonationProtectionState -MailboxIntelligenceProtectionAction -MailboxIntelligenceProtectionActionRecipients -MailboxIntelligenceQuarantineTag -MakeDefault -OutBuffer -OutVariable -PhishThresholdLevel -PolicyTag -SpoofQuarantineTag -TargetedDomainActionRecipients -TargetedDomainProtectionAction -TargetedDomainQuarantineTag -TargetedDomainsToProtect -TargetedUserActionRecipients -TargetedUserProtectionAction -TargetedUserQuarantineTag -TargetedUsersToProtect -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-QuarantinePermissions -AdminDisplayName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PermissionToAllowSender -PermissionToBlockSender -PermissionToDelete -PermissionToDownload -PermissionToPreview -PermissionToRelease -PermissionToRequestRelease -PermissionToViewHeader -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AntiPhishPolicy -AdminDisplayName -AuthenticationFailAction -Confirm -DmarcQuarantineAction -DmarcRejectAction -Enabled -EnableFirstContactSafetyTips -EnableMailboxIntelligence -EnableMailboxIntelligenceProtection -EnableOrganizationDomainsProtection -EnableSimilarDomainsSafetyTips -EnableSimilarUsersSafetyTips -EnableSpoofIntelligence -EnableSuspiciousSafetyTip -EnableTargetedDomainsProtection -EnableTargetedUserProtection -EnableUnauthenticatedSender -EnableUnusualCharactersSafetyTips -EnableViaTag -ErrorAction -ErrorVariable -ExcludedDomains -ExcludedSenders -ExcludedSubDomains -Force -HonorDmarcPolicy -ImpersonationProtectionState -MailboxIntelligenceProtectionAction -MailboxIntelligenceProtectionActionRecipients -MailboxIntelligenceQuarantineTag -MakeDefault -Name -OutBuffer -OutVariable -PhishThresholdLevel -PolicyTag -RecommendedPolicyType -SimilarUsersSafetyTipsCustomText -SpoofQuarantineTag -TargetedDomainActionRecipients -TargetedDomainProtectionAction -TargetedDomainQuarantineTag -TargetedDomainsToProtect -TargetedUserActionRecipients -TargetedUserProtectionAction -TargetedUserQuarantineTag -TargetedUsersToProtect -UnusualCharactersSafetyTipsCustomText -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuotaEligibility -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SecOpsOverridePolicy -AddSentTo -Comment -Debug -DomainController -Enabled -Force -Identity -RemoveSentTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-QuarantinePolicy -AdminDisplayName -AdminNotificationFrequencyInDays -AdminNotificationLanguage -AdminNotificationsEnabled -AdminQuarantinePermissionsList -Confirm -CustomDisclaimer -Debug -Description -DomainController -EndUserQuarantinePermissions -EndUserQuarantinePermissionsValue -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationFrequency -EndUserSpamNotificationFrequencyInDays -EndUserSpamNotificationLanguage -ErrorAction -ErrorVariable -EsnCustomSubject -ESNEnabled -Force -Identity -IgnoreDehydratedFlag -IncludeMessagesFromBlockedSenderAddress -LastModifiedTime -MultiLanguageCustomDisclaimer -MultiLanguageSenderName -MultiLanguageSetting -Name -OrganizationBrandingEnabled -OutBuffer -OutVariable -QuarantineRetentionDays -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PhishSimOverridePolicy -Comment -Debug -DomainController -Enabled -Force -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExoSecOpsOverrideRule -Comment -Debug -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SecOpsOverridePolicy -Confirm -Debug -DomainController -ForceDeletion -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PhishSimOverridePolicy -Confirm -Debug -DomainController -ForceDeletion -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoSecOpsOverrideRule -Confirm -Debug -DomainController -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SecOpsOverridePolicy -Comment -DomainController -Enabled -Force -Name -SentTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-QuarantinePolicy -AdminDisplayName -AdminNotificationFrequencyInDays -AdminNotificationLanguage -AdminNotificationsEnabled -AdminQuarantinePermissionsList -CustomDisclaimer -Debug -DomainController -EndUserQuarantinePermissions -EndUserQuarantinePermissionsValue -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationFrequency -EndUserSpamNotificationFrequencyInDays -EndUserSpamNotificationLanguage -ErrorAction -ErrorVariable -EsnCustomSubject -ESNEnabled -IncludeMessagesFromBlockedSenderAddress -MultiLanguageCustomDisclaimer -MultiLanguageSenderName -MultiLanguageSetting -Name -OrganizationBrandingEnabled -OutBuffer -OutVariable -QuarantinePolicyType -QuarantineRetentionDays -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PhishSimOverridePolicy -Comment -DomainController -Enabled -Force -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ExoSecOpsOverrideRule -Comment -DomainController -Name -Policy -SendTo", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoSecOpsOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExoPhishSimOverrideRule -AddDomains -AddSenderIpRanges -Comment -Debug -DomainController -Identity -RemoveDomains -RemoveSenderIpRanges", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoPhishSimOverrideRule -Confirm -Debug -DomainController -Identity -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ExoPhishSimOverrideRule -Comment -DomainController -Domains -Name -Policy -SenderIpRanges", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoPhishSimOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DnssecStatusForVerifiedDomain -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -SkipDnsValidation -SkipMtaStsValidation -SkipMxValidation -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -Identity -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleID -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ReportSubmissionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -State -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionInfo -BlockingScenario -Details -NumberOfDays", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EtrLimits -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedContentFilterPolicy -AddXHeaderValue -AdminDisplayName -AllowedSenderDomains -AllowedSenders -BlockedSenderDomains -BlockedSenders -BulkQuarantineTag -BulkSpamAction -BulkThreshold -Confirm -DownloadLink -EnableEndUserSpamNotifications -EnableLanguageBlockList -EnableRegionBlockList -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationCustomFromName -EndUserSpamNotificationCustomSubject -EndUserSpamNotificationFrequency -EndUserSpamNotificationLanguage -EndUserSpamNotificationLimit -ErrorAction -ErrorVariable -Group -HighConfidencePhishAction -HighConfidencePhishQuarantineTag -HighConfidenceSpamAction -HighConfidenceSpamQuarantineTag -IncreaseScoreWithBizOrInfoUrls -IncreaseScoreWithImageLinks -IncreaseScoreWithNumericIps -IncreaseScoreWithRedirectToOtherPort -InlineSafetyTipsEnabled -IntraOrgFilterState -LanguageBlockList -MarkAsSpamBulkMail -MarkAsSpamEmbedTagsInHtml -MarkAsSpamEmptyMessages -MarkAsSpamFormTagsInHtml -MarkAsSpamFramesInHtml -MarkAsSpamFromAddressAuthFail -MarkAsSpamJavaScriptInHtml -MarkAsSpamNdrBackscatter -MarkAsSpamObjectTagsInHtml -MarkAsSpamSensitiveWordList -MarkAsSpamSpfRecordHardFail -MarkAsSpamWebBugsInHtml -MatchSubDomains -ModifySubjectValue -Name -OutBuffer -OutVariable -PhishQuarantineTag -PhishSpamAction -PhishZapEnabled -QuarantineRetentionPeriod -RecommendedPolicyType -RedirectToRecipients -RegionBlockList -SpamAction -SpamQuarantineTag -SpamZapEnabled -TestModeAction -TestModeBccToRecipients -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedContentFilterPolicy -AddXHeaderValue -AdminDisplayName -AllowedSenderDomains -AllowedSenders -BlockedSenderDomains -BlockedSenders -BulkQuarantineTag -BulkSpamAction -BulkThreshold -Confirm -DownloadLink -EnableEndUserSpamNotifications -EnableLanguageBlockList -EnableRegionBlockList -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationCustomFromName -EndUserSpamNotificationCustomSubject -EndUserSpamNotificationFrequency -EndUserSpamNotificationLanguage -EndUserSpamNotificationLimit -ErrorAction -ErrorVariable -Group -HighConfidencePhishAction -HighConfidencePhishQuarantineTag -HighConfidenceSpamAction -HighConfidenceSpamQuarantineTag -Identity -IncreaseScoreWithBizOrInfoUrls -IncreaseScoreWithImageLinks -IncreaseScoreWithNumericIps -IncreaseScoreWithRedirectToOtherPort -InlineSafetyTipsEnabled -IntraOrgFilterState -LanguageBlockList -MakeDefault -MarkAsSpamBulkMail -MarkAsSpamEmbedTagsInHtml -MarkAsSpamEmptyMessages -MarkAsSpamFormTagsInHtml -MarkAsSpamFramesInHtml -MarkAsSpamFromAddressAuthFail -MarkAsSpamJavaScriptInHtml -MarkAsSpamNdrBackscatter -MarkAsSpamObjectTagsInHtml -MarkAsSpamSensitiveWordList -MarkAsSpamSpfRecordHardFail -MarkAsSpamWebBugsInHtml -MatchSubDomains -ModifySubjectValue -OutBuffer -OutVariable -PhishQuarantineTag -PhishSpamAction -PhishZapEnabled -QuarantineRetentionPeriod -RedirectToRecipients -RegionBlockList -SafetyTipsLiteEnabled -SpamAction -SpamQuarantineTag -SpamZapEnabled -TestModeAction -TestModeBccToRecipients -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TeamsProtectionPolicyRule -Comments -Confirm -Debug -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TeamsProtectionPolicy -AdminDisplayName -Confirm -Debug -ErrorAction -ErrorVariable -HighConfidencePhishQuarantineTag -Identity -MalwareQuarantineTag -Organization -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TeamsProtectionPolicyRule -Comments -Confirm -Debug -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -Organization -OutBuffer -OutVariable -TeamsProtectionPolicy -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TeamsProtectionPolicy -AdminDisplayName -Confirm -Debug -ErrorAction -ErrorVariable -HighConfidencePhishQuarantineTag -MalwareQuarantineTag -Name -Organization -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AtpPolicyForO365 -AllowSafeDocsOpen -Confirm -EnableATPForSPOTeamsODB -EnableSafeDocs -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSubmissionPolicy -Confirm -ConfirmationNotificationEnabled -ConfirmationNotificationForChatMessageEnabled -ConfirmationNotificationForEmailEnabled -ConfirmationNotificationMessage -ConfirmationNotificationTitle -DisableQuarantineReportingOption -DisableUserSubmissionOptions -EnableCustomizedMsg -EnableCustomNotificationSender -EnableOrganizationBranding -EnableReportToMicrosoft -EnableThirdPartyAddress -EnableUserEmailNotification -ErrorAction -ErrorVariable -Identity -JunkReviewResultMessage -MultiLanguagePostSubmitMessageButtonLinkForJunk -MultiLanguagePostSubmitMessageButtonLinkForPhishing -MultiLanguagePostSubmitMessageButtonTextForJunk -MultiLanguagePostSubmitMessageButtonTextForPhishing -MultiLanguagePostSubmitMessageForJunk -MultiLanguagePostSubmitMessageForPhishing -MultiLanguagePostSubmitMessageTitleForJunk -MultiLanguagePostSubmitMessageTitleForPhishing -MultiLanguagePreSubmitMessageButtonLinkForJunk -MultiLanguagePreSubmitMessageButtonLinkForNotJunk -MultiLanguagePreSubmitMessageButtonLinkForPhishing -MultiLanguagePreSubmitMessageButtonTextForJunk -MultiLanguagePreSubmitMessageButtonTextForNotJunk -MultiLanguagePreSubmitMessageButtonTextForPhishing -MultiLanguagePreSubmitMessageForJunk -MultiLanguagePreSubmitMessageForNotJunk -MultiLanguagePreSubmitMessageForPhishing -MultiLanguagePreSubmitMessageTitleForJunk -MultiLanguagePreSubmitMessageTitleForNotJunk -MultiLanguagePreSubmitMessageTitleForPhishing -MultiLanguageSetting -NotificationFooterMessage -NotificationSenderAddress -NotificationsForCleanSubmissionAirInvestigationsEnabled -NotificationsForPhishMalwareSubmissionAirInvestigationsEnabled -NotificationsForSpamSubmissionAirInvestigationsEnabled -NotificationsForSubmissionAirInvestigationsEnabled -NotJunkReviewResultMessage -OnlyShowPhishingDisclaimer -OutBuffer -OutVariable -PhishingReviewResultMessage -PostSubmitMessage -PostSubmitMessageEnabled -PostSubmitMessageForJunk -PostSubmitMessageForNotJunk -PostSubmitMessageForPhishing -PostSubmitMessageTitle -PostSubmitMessageTitleForJunk -PostSubmitMessageTitleForNotJunk -PostSubmitMessageTitleForPhishing -PreSubmitMessage -PreSubmitMessageEnabled -PreSubmitMessageForJunk -PreSubmitMessageForNotJunk -PreSubmitMessageForPhishing -PreSubmitMessageTitle -PreSubmitMessageTitleForJunk -PreSubmitMessageTitleForNotJunk -PreSubmitMessageTitleForPhishing -ReportChatMessageEnabled -ReportChatMessageToCustomizedAddressEnabled -ReportJunkAddresses -ReportJunkToCustomizedAddress -ReportNotJunkAddresses -ReportNotJunkToCustomizedAddress -ReportPhishAddresses -ReportPhishToCustomizedAddress -ThirdPartyReportAddresses -UserSubmissionOptions -UserSubmissionOptionsMessage -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MalwareFilterPolicy -Action -AdminDisplayName -Confirm -CustomAlertText -CustomExternalBody -CustomExternalSubject -CustomFromAddress -CustomFromName -CustomInternalBody -CustomInternalSubject -CustomNotifications -EnableExternalSenderAdminNotifications -EnableExternalSenderNotifications -EnableFileFilter -EnableInternalSenderAdminNotifications -EnableInternalSenderNotifications -ErrorAction -ErrorVariable -ExternalSenderAdminAddress -FileTypeAction -FileTypes -Identity -InternalSenderAdminAddress -IsPolicyOverrideApplied -MakeDefault -OutBuffer -OutVariable -QuarantineTag -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSubmissionPolicy -Confirm -ConfirmationNotificationEnabled -ConfirmationNotificationForChatMessageEnabled -ConfirmationNotificationForEmailEnabled -ConfirmationNotificationMessage -ConfirmationNotificationTitle -DisableQuarantineReportingOption -DisableUserSubmissionOptions -EnableCustomizedMsg -EnableCustomNotificationSender -EnableOrganizationBranding -EnableReportToMicrosoft -EnableThirdPartyAddress -EnableUserEmailNotification -ErrorAction -ErrorVariable -JunkReviewResultMessage -MultiLanguagePostSubmitMessageButtonLinkForJunk -MultiLanguagePostSubmitMessageButtonLinkForPhishing -MultiLanguagePostSubmitMessageButtonTextForJunk -MultiLanguagePostSubmitMessageButtonTextForPhishing -MultiLanguagePostSubmitMessageForJunk -MultiLanguagePostSubmitMessageForPhishing -MultiLanguagePostSubmitMessageTitleForJunk -MultiLanguagePostSubmitMessageTitleForPhishing -MultiLanguagePreSubmitMessageButtonLinkForJunk -MultiLanguagePreSubmitMessageButtonLinkForNotJunk -MultiLanguagePreSubmitMessageButtonLinkForPhishing -MultiLanguagePreSubmitMessageButtonTextForJunk -MultiLanguagePreSubmitMessageButtonTextForNotJunk -MultiLanguagePreSubmitMessageButtonTextForPhishing -MultiLanguagePreSubmitMessageForJunk -MultiLanguagePreSubmitMessageForNotJunk -MultiLanguagePreSubmitMessageForPhishing -MultiLanguagePreSubmitMessageTitleForJunk -MultiLanguagePreSubmitMessageTitleForNotJunk -MultiLanguagePreSubmitMessageTitleForPhishing -MultiLanguageSetting -NotificationFooterMessage -NotificationSenderAddress -NotificationsForCleanSubmissionAirInvestigationsEnabled -NotificationsForPhishMalwareSubmissionAirInvestigationsEnabled -NotificationsForSpamSubmissionAirInvestigationsEnabled -NotificationsForSubmissionAirInvestigationsEnabled -NotJunkReviewResultMessage -OnlyShowPhishingDisclaimer -OutBuffer -OutVariable -PhishingReviewResultMessage -PostSubmitMessage -PostSubmitMessageEnabled -PostSubmitMessageForJunk -PostSubmitMessageForNotJunk -PostSubmitMessageForPhishing -PostSubmitMessageTitle -PostSubmitMessageTitleForJunk -PostSubmitMessageTitleForNotJunk -PostSubmitMessageTitleForPhishing -PreSubmitMessage -PreSubmitMessageEnabled -PreSubmitMessageForJunk -PreSubmitMessageForNotJunk -PreSubmitMessageForPhishing -PreSubmitMessageTitle -PreSubmitMessageTitleForJunk -PreSubmitMessageTitleForNotJunk -PreSubmitMessageTitleForPhishing -ReportChatMessageEnabled -ReportChatMessageToCustomizedAddressEnabled -ReportJunkAddresses -ReportJunkToCustomizedAddress -ReportNotJunkAddresses -ReportNotJunkToCustomizedAddress -ReportPhishAddresses -ReportPhishToCustomizedAddress -ThirdPartyReportAddresses -UserSubmissionOptions -UserSubmissionOptionsMessage -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Release-QuarantineMessage -ActionType -AllowSender -Confirm -Delete -EntityType -ErrorAction -ErrorVariable -Force -Identities -Identity -OutBuffer -OutVariable -ReleaseToAll -ReportFalsePositive -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Preview-QuarantineMessage -EntityType -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessageHeader -EntityType -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-QuarantineMessage -CompressOutput -Debug -DomainController -EntityType -ErrorAction -ErrorVariable -ForceConversionToMime -Identities -Identity -OutBuffer -OutVariable -Password -ReasonForExport -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ATPEvaluationRule -AntiPhishPolicy -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -OutBuffer -OutVariable -RecipientDomainIs -SafeAttachmentPolicy -SafeLinksPolicy -SentTo -SentToMemberOf -ShareWithMicrosoft -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DetailZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AggregateZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MalwareFilterPolicy -Action -AdminDisplayName -Confirm -CustomAlertText -CustomExternalBody -CustomExternalSubject -CustomFromAddress -CustomFromName -CustomInternalBody -CustomInternalSubject -CustomNotifications -EnableExternalSenderAdminNotifications -EnableExternalSenderNotifications -EnableFileFilter -EnableInternalSenderAdminNotifications -EnableInternalSenderNotifications -ErrorAction -ErrorVariable -ExternalSenderAdminAddress -FileTypeAction -FileTypes -InternalSenderAdminAddress -Name -OutBuffer -OutVariable -QuarantineTag -RecommendedPolicyType -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeLinksPolicy -AdminDisplayName -AllowClickThrough -Confirm -CustomNotificationText -DeliverMessageAfterScan -DisableUrlRewrite -DoNotRewriteUrls -EnableForInternalSenders -EnableOrganizationBranding -EnableSafeLinksForEmail -EnableSafeLinksForOffice -EnableSafeLinksForTeams -ErrorAction -ErrorVariable -LocalizedNotificationTextList -MakeBuiltInProtection -Name -OutBuffer -OutVariable -RecommendedPolicyType -ScanUrls -TrackClicks -UseTranslatedNotificationText -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeLinksPolicy -AdminDisplayName -AllowClickThrough -Confirm -CustomNotificationText -DeliverMessageAfterScan -DisableUrlRewrite -DoNotRewriteUrls -EnableForInternalSenders -EnableOrganizationBranding -EnableSafeLinksForEmail -EnableSafeLinksForOffice -EnableSafeLinksForTeams -ErrorAction -ErrorVariable -Identity -LocalizedNotificationTextList -OutBuffer -OutVariable -ScanUrls -TrackClicks -UseTranslatedNotificationText -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ArcConfig -ArcTrustedSealers -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ATPEvaluationRule -AntiPhishPolicy -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -RecipientDomainIs -SafeAttachmentPolicy -SafeLinksPolicy -SentTo -SentToMemberOf -ShareWithMicrosoft -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DkimSigningConfigSelectorCnames -DomainName", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ArcConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPEvaluationRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ATPEvaluationRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ATPEvaluationRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoDetailReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoAggregateReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BlockedConnector -Confirm -ConnectorId -ErrorAction -ErrorVariable -Reason -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedConnector -ConnectorId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ATPBuiltInProtectionRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ATPBuiltInProtectionRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -SafeAttachmentPolicy -SafeLinksPolicy -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPBuiltInProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeAttachmentPolicy -Action -ActionOnError -AdminDisplayName -Confirm -CustomNotificationText -Enable -EnableOrganizationBranding -ErrorAction -ErrorVariable -MakeBuiltInProtection -Name -OutBuffer -OutVariable -QuarantineTag -RecommendedPolicyType -Redirect -RedirectAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListItems -Allow -Block -Entry -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListItems -Entries -ErrorAction -ErrorVariable -Ids -InformationAction -InformationVariable -ListSubType -ListType -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SecOpsOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-QuarantinePolicy -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantinePolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantinePolicyType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PhishSimOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeAttachmentPolicy -Action -ActionOnError -AdminDisplayName -Confirm -CustomNotificationText -Enable -EnableOrganizationBranding -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantineTag -Redirect -RedirectAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EmailTenantSettings -Confirm -Debug -DomainController -EnablePriorityAccountProtection -ErrorAction -ErrorVariable -Identity -IgnoreDehydratedFlag -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EmailTenantSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListSpoofItems -ErrorAction -ErrorVariable -Identity -Ids -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -Ids -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendingInfrastructure -SpoofedUser -SpoofType -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DkimSigningConfig -AdminDisplayName -BodyCanonicalization -Confirm -DomainName -Enabled -ErrorAction -ErrorVariable -HeaderCanonicalization -KeySize -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -Identity -VIP", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReportSeries -AggregateBy -ConnectorIds -Domain -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -GroupByFields -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Identity -IsVIP", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofIntelligenceInsight -AllowedToSpoof -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeLinksRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeLinksPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeAttachmentRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeAttachmentPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSubmissionRule -Comments -Confirm -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -ReportSubmissionPolicy -SentTo -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MalwareFilterRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -MalwareFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedOutboundSpamFilterRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfFrom -ExceptIfFromMemberOf -ExceptIfSenderDomainIs -From -FromMemberOf -HostedOutboundSpamFilterPolicy -Identity -Name -OutBuffer -OutVariable -Priority -SenderDomainIs -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedOutboundSpamFilterPolicy -ActionWhenThresholdReached -AdminDisplayName -AutoForwardingMode -BccSuspiciousOutboundAdditionalRecipients -BccSuspiciousOutboundMail -BlockUnlistedDomains -Confirm -ErrorAction -ErrorVariable -Identity -NotifyOutboundSpam -NotifyOutboundSpamRecipients -OutBuffer -OutVariable -RecipientLimitExternalPerHour -RecipientLimitInternalPerHour -RecipientLimitPerDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedContentFilterRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -HostedContentFilterPolicy -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedConnectionFilterPolicy -AdminDisplayName -ConfigurationXmlRaw -Confirm -EnableSafeList -ErrorAction -ErrorVariable -Identity -IPAllowList -IPBlockList -MakeDefault -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EOPProtectionPolicyRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DkimSigningConfig -AdminDisplayName -BodyCanonicalization -Confirm -Enabled -ErrorAction -ErrorVariable -HeaderCanonicalization -Identity -KeySize -OutBuffer -OutVariable -PublishTxtRecords -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AntiPhishRule -AntiPhishPolicy -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ATPProtectionPolicyRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Rotate-DkimSigningConfig -Confirm -ErrorAction -ErrorVariable -Identity -KeySize -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeLinksRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeLinksPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeAttachmentRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeAttachmentPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ReportSubmissionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MalwareFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MalwareFilterPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedOutboundSpamFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedOutboundSpamFilterPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedContentFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedContentFilterPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedConnectionFilterPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-EOPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BlockedSenderAddress -Confirm -ErrorAction -ErrorVariable -Reason -SenderAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AntiPhishRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AntiPhishPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ATPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeLinksRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeLinksPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeAttachmentRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeAttachmentPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSubmissionRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -ReportSubmissionPolicy -SentTo -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MalwareFilterRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -MalwareFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedOutboundSpamFilterRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfFrom -ExceptIfFromMemberOf -ExceptIfSenderDomainIs -From -FromMemberOf -HostedOutboundSpamFilterPolicy -Name -OutBuffer -OutVariable -Priority -SenderDomainIs -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedOutboundSpamFilterPolicy -ActionWhenThresholdReached -AdminDisplayName -AutoForwardingMode -BccSuspiciousOutboundAdditionalRecipients -BccSuspiciousOutboundMail -Confirm -ErrorAction -ErrorVariable -Force -Name -NotifyOutboundSpam -NotifyOutboundSpamRecipients -OutBuffer -OutVariable -RecipientLimitExternalPerHour -RecipientLimitInternalPerHour -RecipientLimitPerDay -RecommendedPolicyType -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedContentFilterRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -HostedContentFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedConnectionFilterPolicy -AdminDisplayName -ConfigurationXmlRaw -Confirm -EnableSafeList -ErrorAction -ErrorVariable -IPAllowList -IPBlockList -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-EOPProtectionPolicyRule -AntiPhishPolicy -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -HostedContentFilterPolicy -MalwareFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AntiPhishRule -AntiPhishPolicy -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ATPProtectionPolicyRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeAttachmentPolicy -SafeLinksPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRule -DlpPolicy -ErrorAction -ErrorVariable -ExcludeConditionActionDetails -Filter -Identity -OutBuffer -OutVariable -ResultSize -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatSummary -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatProfileDetails -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProtectionStatusFilter -SenderDomainFilter -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatInstances -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PageSize -ProtectionStatusFilter -SenderDomainFilter -StartPage -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatDetails -Base64FileHash -EndTime -ErrorAction -ErrorVariable -FileHash -OutBuffer -OutVariable -StartTime -ThreatType -UserPrincipalName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignProfile -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignIndustries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignCountries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticle -ArticleURL -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SubmissionCategoryReport -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofMailReport -Action -Direction -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityReport -AggregateBy -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityDetailsReport -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Sender -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksDetailReport -Action -AppNameList -Domain -EndDate -Page -PageSize -RecipientAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksAggregateReport -Action -AppNameList -EndDate -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportScheduleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSchedule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportExecutionInstance -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -Capabilities -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterMessageTrace -End -Recipient -Sender -Start", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetail -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrace -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -Status -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficTopReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficSummaryReport -Category -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficPolicyReport -Action -AggregateBy -Direction -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFlowStatusReport -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFilterListReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -SelectionTarget -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailTransportRuleReport -Action -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEvaluationModeReport -ConnectorId -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailATPReport -DataSource -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -IsV2Report -MalwareName -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportSummary -Action -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportDetails -Action -AggregateBy -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedConnectionFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReport -AggregateBy -ConnectorId -Direction -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EOPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpIncidentDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetectionsReport -Action -AggregateBy -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -SummarizeBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DkimSigningConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassificationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomizedUserSubmission -AggregateBy -Debug -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -SubmissionNetworkMessageId -SubmittedBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConfigAnalyzerPolicyRecommendation -ErrorAction -ErrorVariable -Identity -IsAppliedToDisabled -OutBuffer -OutVariable -RecommendedPolicyType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserDetailReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserAggregateReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicyFileSyncNotification -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedSenderAddress -SenderAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AtpPolicyForO365 -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishPolicy -Advanced -ErrorAction -ErrorVariable -Identity -Impersonation -OutBuffer -OutVariable -Spoof -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionTrafficReport -Action -AggregateBy -Direction -DisplayBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MalwareName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentReport -Action -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentDetail -Action -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPTotalTrafficReport -Action -AggregateBy -Direction -Domain -DurationDays -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SafeLinksRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SafeAttachmentRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ReportSubmissionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-MalwareFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-HostedOutboundSpamFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-HostedContentFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-EOPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-AntiPhishRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ATPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SafeLinksRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SafeAttachmentRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ReportSubmissionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-MalwareFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-HostedOutboundSpamFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-HostedContentFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-EOPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-AntiPhishRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ATPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/4a7b936a-284b-44ac-9244-bbcee14a6eb2.json b/RoleDefinitions/4a7b936a-284b-44ac-9244-bbcee14a6eb2.json new file mode 100644 index 000000000..c431e389a --- /dev/null +++ b/RoleDefinitions/4a7b936a-284b-44ac-9244-bbcee14a6eb2.json @@ -0,0 +1,61 @@ +{ + "id": "4a7b936a-284b-44ac-9244-bbcee14a6eb2", + "description": "This role enables administrators to manage the Unified Messaging configuration of mailboxes and other recipients in an organization.", + "displayName": "UM Mailboxes", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Contact -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DistributionGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DynamicDistributionGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailContact -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -SecondaryAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailbox -Confirm -ErrorAction -ErrorVariable -Identity -ImListMigrationCompleted -MissedCallNotificationEnabled -OutBuffer -OutVariable -PinlessAccessToVoiceMailEnabled -UMSMSNotificationOption -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailboxPIN -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Pin -PinExpired -SendEmail -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -PublicFolder -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-UMPhoneSession -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-UMPhoneSession -AwayVoicemailGreeting -CallAnsweringRuleId -Confirm -DefaultVoicemailGreeting -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PhoneNumber -UMMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailboxConfiguration -Confirm -DefaultPlayOnPhoneNumber -ErrorAction -ErrorVariable -FolderToReadEmailsFrom -Greeting -Identity -OutBuffer -OutVariable -ReadOldestUnreadVoiceMessagesFirst -ReceivedVoiceMailPreviewEnabled -SentVoiceMailPreviewEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMCallAnsweringRule -CallerIds -CallersCanInterruptGreeting -CheckAutomaticReplies -Confirm -ErrorAction -ErrorVariable -ExtensionsDialed -Identity -KeyMappings -Mailbox -Name -OutBuffer -OutVariable -Priority -ScheduleStatus -TimeOfDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxLocation -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxJunkEmailConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-UMCallAnsweringRule -CallerIds -CallersCanInterruptGreeting -CheckAutomaticReplies -Confirm -ErrorAction -ErrorVariable -ExtensionsDialed -KeyMappings -Mailbox -Name -OutBuffer -OutVariable -Priority -ScheduleStatus -TimeOfDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMPhoneSession -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPlan -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPIN -Credential -ErrorAction -ErrorVariable -Identity -IgnoreErrors -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMDialPlan -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallAnsweringRule -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPlan -AllMailboxPlanReleases -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxJunkEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailUser -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailContact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Contact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -RecipientTypeDetails", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/4ba39ca4-527c-499a-b93d-d9b492c50246.json b/RoleDefinitions/4ba39ca4-527c-499a-b93d-d9b492c50246.json index 4e1dc9ece..9e60fdf88 100644 --- a/RoleDefinitions/4ba39ca4-527c-499a-b93d-d9b492c50246.json +++ b/RoleDefinitions/4ba39ca4-527c-499a-b93d-d9b492c50246.json @@ -38,6 +38,7 @@ "microsoft.directory/groups/members/update", "microsoft.directory/groups/owners/update", "microsoft.directory/groups/restore", + "microsoft.directory/groups.unified/assignedLabels/update", "microsoft.directory/oAuth2PermissionGrants/allProperties/allTasks", "microsoft.directory/servicePrincipals/appRoleAssignedTo/update", "microsoft.directory/users/assignLicense", diff --git a/RoleDefinitions/4c04d12c-b1e5-49ca-9330-efa03a51b384.json b/RoleDefinitions/4c04d12c-b1e5-49ca-9330-efa03a51b384.json new file mode 100644 index 000000000..875a1e5fb --- /dev/null +++ b/RoleDefinitions/4c04d12c-b1e5-49ca-9330-efa03a51b384.json @@ -0,0 +1,95 @@ +{ + "id": "4c04d12c-b1e5-49ca-9330-efa03a51b384", + "description": "This role enables administrators to manage management role groups; role assignment policies and management roles; and role entries, assignments, and scopes in an organization. \r\nUsers assigned this role can override the role group managed by property, configure any role group, and add or remove members to or from any role group.", + "displayName": "Role Management", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ServicePrincipal -Confirm -Debug -ErrorAction -ErrorVariable -Identity -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ServicePrincipal -AppId -Confirm -DisplayName -ErrorAction -ErrorVariable -ObjectId -OutBuffer -OutVariable -ServiceId -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ManagementRoleAssignment -Confirm -CustomRecipientWriteScope -CustomResourceScope -Enabled -ErrorAction -ErrorVariable -ExclusiveRecipientWriteScope -Force -Identity -OutBuffer -OutVariable -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientRelativeWriteScope -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ManagementRoleAssignment -App -Confirm -CustomRecipientWriteScope -CustomResourceScope -Delegating -ErrorAction -ErrorVariable -ExclusiveRecipientWriteScope -Force -Name -OutBuffer -OutVariable -Policy -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientRelativeWriteScope -Role -SecurityGroup -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleAssignment -AssignmentMethod -ConfigWriteScope -CustomRecipientWriteScope -Delegating -Enabled -ErrorAction -ErrorVariable -Exclusive -ExclusiveRecipientWriteScope -GetEffectiveUsers -Identity -OutBuffer -OutVariable -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientWriteScope -Role -RoleAssignee -RoleAssigneeType -WarningAction -WarningVariable -WritableRecipient", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleEntry -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Parameters -PSSnapinName -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-ServicePrincipalAuthorization -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Resource -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServicePrincipal -Debug -ErrorAction -ErrorVariable -Identity -Organization -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AccessToCustomerDataRequest -ApprovalDecision -Comment -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -ResultSize -ServiceName -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ServicePrincipal -Confirm -Debug -DisplayName -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-RoleGroupMember -BypassSecurityGroupManagerCheck -Confirm -ErrorAction -ErrorVariable -Identity -Members -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RoleGroup -BypassSecurityGroupManagerCheck -Confirm -Description -DisplayName -ErrorAction -ErrorVariable -Force -Identity -ManagedBy -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WellKnownObject -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RoleAssignmentPolicy -Confirm -Description -ErrorAction -ErrorVariable -Identity -IsDefault -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ManagementScope -Confirm -ErrorAction -ErrorVariable -Force -Identity -Name -OutBuffer -OutVariable -RecipientRestrictionFilter -RecipientRoot -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ManagementRoleEntry -AddParameter -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Parameters -RemoveParameter -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ElevatedAccessRequest -Comment -Debug -Decision -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestContext -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ElevatedAccessApprovalPolicy -ApprovalType -ApproverGroup -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ComplianceSecurityFilter -Action -Confirm -Description -ErrorAction -ErrorVariable -FilterName -Filters -Force -OutBuffer -OutVariable -Region -Users -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Revoke-ElevatedAccessAuthorization -Comment -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RoleGroupMember -BypassSecurityGroupManagerCheck -Confirm -ErrorAction -ErrorVariable -Identity -Member -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RoleGroup -BypassSecurityGroupManagerCheck -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RoleAssignmentPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ManagementScope -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ManagementRoleEntry -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ManagementRoleAssignment -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ManagementRole -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Recurse -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ElevatedAccessApprovalPolicy -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ComplianceSecurityFilter -Confirm -ErrorAction -ErrorVariable -FilterName -Force -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Receive-ExoJob -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -SubJobId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-RoleGroup -Confirm -CustomRecipientWriteScope -Description -DisplayName -ErrorAction -ErrorVariable -Force -ManagedBy -Members -Name -OutBuffer -OutVariable -Roles -WarningAction -WarningVariable -WellKnownObject -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-RoleAssignmentPolicy -Confirm -Description -ErrorAction -ErrorVariable -IsDefault -Name -OutBuffer -OutVariable -Roles -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PrivilegedIdentityManagementRequest -Debug -DurationHours -ErrorAction -ErrorVariable -ExternalIdentity -OutBuffer -OutVariable -Reason -RequestContext -Role -RoleGroup -Task -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ManagementScope -Confirm -ErrorAction -ErrorVariable -Exclusive -Force -Name -OutBuffer -OutVariable -RecipientRestrictionFilter -RecipientRoot -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ManagementRole -Confirm -Description -EnabledCmdlets -ErrorAction -ErrorVariable -Force -Name -OutBuffer -OutVariable -Parent -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ElevatedAccessRequest -Debug -DurationHours -ErrorAction -ErrorVariable -ExternalIdentity -OutBuffer -OutVariable -Reason -RequestContext -Role -RoleGroup -Task -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ElevatedAccessApprovalPolicy -ApprovalType -ApproverGroup -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Role -RoleGroup -Task -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ComplianceSecurityFilter -Action -Confirm -Description -ErrorAction -ErrorVariable -FilterName -Filters -OutBuffer -OutVariable -Region -Users -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SecurityPrincipal -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -RoleGroupAssignable -Types -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleGroupMember -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleGroup -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -ShowPartnerLinked -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleAssignmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RbacDiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementScope -ErrorAction -ErrorVariable -Exclusive -Identity -Orphan -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRole -Cmdlet -CmdletParameters -ErrorAction -ErrorVariable -GetChildren -Identity -OutBuffer -OutVariable -Recurse -RoleType -Script -ScriptParameters -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -Async -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -Properties -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Group -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoJob -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Recursive -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ElevatedAccessRequest -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ElevatedAccessAuthorization -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -Requestor -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ElevatedAccessApprovalPolicy -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -Async -Credential -ErrorAction -ErrorVariable -Filter -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -Properties -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceSecurityFilter -Action -ErrorAction -ErrorVariable -FilterName -OutBuffer -OutVariable -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AccessToCustomerDataRequest -ApprovalStatus -CreatedAfter -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ElevatedAccessControl -AdminGroup -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -SystemAccounts -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ElevatedAccessControl -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Deny-ElevatedAccessRequest -Comment -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Approve-ElevatedAccessRequest -Comment -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestContext -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-RoleGroupMember -BypassSecurityGroupManagerCheck -Confirm -ErrorAction -ErrorVariable -Identity -Member -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-ManagementRoleEntry -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Overwrite -Parameters -ParentRoleEntry -Role -Type -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/4dbf77c0-feff-4aeb-95a6-2322b773ce46.json b/RoleDefinitions/4dbf77c0-feff-4aeb-95a6-2322b773ce46.json new file mode 100644 index 000000000..d3d43a559 --- /dev/null +++ b/RoleDefinitions/4dbf77c0-feff-4aeb-95a6-2322b773ce46.json @@ -0,0 +1,20 @@ +{ + "id": "4dbf77c0-feff-4aeb-95a6-2322b773ce46", + "description": null, + "displayName": "Information Protection Investigator", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-UnifiedAuditLog -Debug -EndDate -ErrorAction -ErrorVariable -Formatted -FreeText -HighCompleteness -IPAddresses -LongerRetentionEnabled -ObjectIds -Operations -OutBuffer -OutVariable -RecordType -ResultSize -SessionCommand -SessionId -SiteIds -StartDate -UserIds -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/4e76d84d-e913-47e8-a6a2-fe5b026c93a6.json b/RoleDefinitions/4e76d84d-e913-47e8-a6a2-fe5b026c93a6.json new file mode 100644 index 000000000..7febe44c6 --- /dev/null +++ b/RoleDefinitions/4e76d84d-e913-47e8-a6a2-fe5b026c93a6.json @@ -0,0 +1,21 @@ +{ + "id": "4e76d84d-e913-47e8-a6a2-fe5b026c93a6", + "description": null, + "displayName": "Information Protection Reader", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficSummaryReport -Category -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/50692a93-f09d-455d-b9d6-ad0bf7743bdd.json b/RoleDefinitions/50692a93-f09d-455d-b9d6-ad0bf7743bdd.json new file mode 100644 index 000000000..74020db31 --- /dev/null +++ b/RoleDefinitions/50692a93-f09d-455d-b9d6-ad0bf7743bdd.json @@ -0,0 +1,36 @@ +{ + "id": "50692a93-f09d-455d-b9d6-ad0bf7743bdd", + "description": "This role enables individual users to create, modify and view distribution groups and modify, view, remove, and add members to distribution groups they own.", + "displayName": "MyDistributionGroups", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -ManagedBy -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Upgrade-DistributionGroup -DlIdentities -ExecutingUser -Organization", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -Properties -PropertySet -ResultSize -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Group -Description -DisplayName -ErrorAction -ErrorVariable -Identity -ManagedBy -Name -Notes -OutBuffer -OutVariable -PhoneticDisplayName -SeniorityIndex -SimpleDisplayName -Universal -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DistributionGroup -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -Alias -BccBlocked -BypassModerationFromSendersOrMembers -Confirm -CustomAttribute1 -CustomAttribute10 -CustomAttribute11 -CustomAttribute12 -CustomAttribute13 -CustomAttribute14 -CustomAttribute15 -CustomAttribute2 -CustomAttribute3 -CustomAttribute4 -CustomAttribute5 -CustomAttribute6 -CustomAttribute7 -CustomAttribute8 -CustomAttribute9 -Description -DisplayName -EmailAddresses -ErrorAction -ErrorVariable -ExtensionCustomAttribute1 -ExtensionCustomAttribute2 -ExtensionCustomAttribute3 -ExtensionCustomAttribute4 -ExtensionCustomAttribute5 -GrantSendOnBehalfTo -Identity -MailTip -MailTipTranslations -ManagedBy -MemberJoinRestriction -ModeratedBy -ModerationEnabled -Name -OutBuffer -OutVariable -PrimarySmtpAddress -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -ReportToManagerEnabled -ReportToOriginatorEnabled -SendModerationNotifications -SendOofMessageToOriginatorEnabled -SimpleDisplayName -WarningAction -WarningVariable -WhatIf -WindowsEmailAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DistributionGroup -Alias -BccBlocked -Confirm -CopyOwnerToMember -Description -DisplayName -ErrorAction -ErrorVariable -ManagedBy -MemberJoinRestriction -Members -ModeratedBy -ModerationEnabled -Name -Notes -OutBuffer -OutVariable -PrimarySmtpAddress -RequireSenderAuthenticationEnabled -SendModerationNotifications -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -Members -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DynamicDistributionGroup -ErrorAction -ErrorVariable -Identity -MailTip -MailTipTranslations -OutBuffer -OutVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -Member -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroup -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Group -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -Member -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/55aee955-7c5f-46ea-90e0-f12d5c36fbc1.json b/RoleDefinitions/55aee955-7c5f-46ea-90e0-f12d5c36fbc1.json new file mode 100644 index 000000000..874abadc6 --- /dev/null +++ b/RoleDefinitions/55aee955-7c5f-46ea-90e0-f12d5c36fbc1.json @@ -0,0 +1,20 @@ +{ + "id": "55aee955-7c5f-46ea-90e0-f12d5c36fbc1", + "description": "", + "displayName": "MyMobileInformation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": false, + "templateId": "tplantcomau.onmicrosoft.com\\MyContactInformation", + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -Identity -MobilePhone -Pager" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/58ab501a-fb92-47b8-b3a2-fdbff8387da4.json b/RoleDefinitions/58ab501a-fb92-47b8-b3a2-fdbff8387da4.json new file mode 100644 index 000000000..0535e9891 --- /dev/null +++ b/RoleDefinitions/58ab501a-fb92-47b8-b3a2-fdbff8387da4.json @@ -0,0 +1,54 @@ +{ + "id": "58ab501a-fb92-47b8-b3a2-fdbff8387da4", + "description": "This role enables administrators to move mailboxes between servers in an organization and between servers in the local organization and another organization.", + "displayName": "Move Mailboxes", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -ArchiveGuid -ExchangeGuid -Identity -UnblockForwardSyncPostCrossTenantMigration", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MoveRequest -AcceptLargeDataLoss -BadItemLimit -BatchName -CompleteAfter -CompletedRequestAgeLimit -Confirm -ErrorAction -ErrorVariable -Identity -IncrementalSyncInterval -LargeItemLimit -MoveOptions -OutBuffer -OutVariable -PreventCompletion -ProxyToMailbox -RemoteCredential -RemoteGlobalCatalog -RemoteHostName -RequestExpiryInterval -SkipMoving -SkippedItemApprovalTime -SourceEndpoint -StartAfter -SuspendWhenReadyToComplete -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MoveRequest -AcceptLargeDataLoss -ArchiveDomain -ArchiveOnly -BadItemLimit -BatchName -CompleteAfter -CompletedRequestAgeLimit -Confirm -ErrorAction -ErrorVariable -ForceOffline -Identity -IncrementalSyncInterval -LargeItemLimit -MoveOptions -Outbound -OutBuffer -OutVariable -PreventCompletion -PrimaryOnly -ProxyToMailbox -Remote -RemoteArchiveTargetDatabase -RemoteCredential -RemoteGlobalCatalog -RemoteHostName -RemoteTargetDatabase -RemoteTenant -RequestExpiryInterval -SkipMoving -SourceEndpoint -StartAfter -Suspend -SuspendComment -SuspendWhenReadyToComplete -TargetDeliveryDomain -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MRSRequestStatistics -Debug -DiagnosticInfo -DiagnosticOnly -DomainController -ErrorAction -ErrorVariable -Identity -IncludeHighLevelTenantScanResult -IncludeReport -IncludeSkippedItems -IncludeSlaReport -OutBuffer -OutVariable -ReportOnly -RequestGuid -RequestQueue -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxRestoreRequest -AcceptLargeDataLoss -AllowLegacyDNMismatch -AssociatedMessagesCopyOption -BadItemLimit -BatchName -CompletedRequestAgeLimit -Confirm -ConflictResolutionOption -ContentFilter -ContentFilterLanguage -CrossTenantRestore -Debug -DomainController -ErrorAction -ErrorVariable -ExcludeDumpster -ExcludeFolders -IncludeFolders -LargeItemLimit -Name -OutBuffer -OutVariable -RemoteCredential -RemoteDatabaseGuid -RemoteHostName -RemoteRestoreType -SkipMerging -SourceEndpoint -SourceExchangeGuid -SourceIsArchive -SourceMailbox -SourceRootFolder -SourceStoreMailbox -SourceTenant -Suspend -SuspendComment -TargetIsArchive -TargetMailbox -TargetRootFolder -TargetType -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MoveRequest -BatchName -ErrorAction -ErrorVariable -Flags -Identity -MoveStatus -Offline -OutBuffer -OutVariable -ProxyToMailbox -RemoteHostName -ResultSize -SortBy -Status -Suspend -SuspendWhenReadyToComplete -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxRestoreRequest -AcceptLargeDataLoss -BadItemLimit -BatchName -CompletedRequestAgeLimit -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Identity -InternalFlags -LargeItemLimit -OutBuffer -OutVariable -Priority -RehomeRequest -RemoteDatabaseGuid -RemoteHostName -RequestExpiryInterval -SkipInitialConnectionValidation -SkipMerging -SkippedItemApprovalTime -SourceWlmLevel -TargetWlmLevel -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxRelocationRequest -AcceptLargeDataLoss -BadItemLimit -BatchName -CallerData -CompleteAfter -CompletedRequestAgeLimit -Confirm -Debug -DomainController -DoNotPreserveMailboxSignature -ErrorAction -ErrorVariable -ForceOffline -ForcePull -ForcePush -Identity -IncrementalSyncInterval -InternalFlags -LargeItemLimit -MailboxWorkloads -OutBuffer -OutVariable -PreventCompletion -Priority -Protect -RequestExpiryInterval -SkipMoving -SourceDatabase -SourceWlmLevel -StartAfter -Suspend -SuspendComment -TargetDatabase -TargetWlmLevel -Verbose -WarningAction -WarningVariable -WhatIf -WorkloadType", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DatabaseMaintenanceRequest -BatchName -CallerData -Confirm -Debug -ErrorAction -ErrorVariable -IncrementalSyncInterval -InternalFlags -OutBuffer -OutVariable -Priority -RequestExpiryInterval -TargetDatabase -Verbose -WarningAction -WarningVariable -WhatIf -WorkloadType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MRSRequest -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -HardDeleteIndexOnly -HardDeleteJobOnly -Identity -MailboxLocation -OutBuffer -OutVariable -RequestGuid -RequestQueue -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MoveRequestStatistics -Analysis -DiagnosticInfo -DiagnosticOnly -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ProxyToMailbox -ReportOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxRestoreRequestStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ReportOnly -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Suspend-MoveRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProxyToMailbox -SuspendComment -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Suspend-MailboxRestoreRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SuspendComment -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Suspend-MRSRequest -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SuspendComment -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Notification -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmails -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Resume-MoveRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProxyToMailbox -SuspendWhenReadyToComplete -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Resume-MailboxRestoreRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Resume-MRSRequest -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MoveRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -ProxyToMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxRestoreRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Notification -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProcessType -ResultSize -StartDate -Summary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxRestoreRequest -BatchName -ErrorAction -ErrorVariable -HighPriority -Identity -Name -OutBuffer -OutVariable -ResultSize -Status -Suspend -TargetMailbox -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MRSRequest -BatchName -Debug -DomainController -ErrorAction -ErrorVariable -Flags -HighPriority -Identity -IncludeSoftDeleted -MailboxLocation -Name -Organization -OutBuffer -OutVariable -RequestQueue -RequestType -ResultSize -SourceDatabase -Status -Suspend -TargetDatabase -UseMailboxIndex -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/58fe2077-9c84-4e68-9916-c539943d4728.json b/RoleDefinitions/58fe2077-9c84-4e68-9916-c539943d4728.json new file mode 100644 index 000000000..2cd907ac0 --- /dev/null +++ b/RoleDefinitions/58fe2077-9c84-4e68-9916-c539943d4728.json @@ -0,0 +1,19 @@ +{ + "id": "58fe2077-9c84-4e68-9916-c539943d4728", + "description": "Allows the app to create, read, update, and delete all contacts in all mailboxes without a signed-in user", + "displayName": "Application Contacts.ReadWrite", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Contacts.ReadWrite" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5a7f2348-00e1-480a-adf3-0e1f1a41b595.json b/RoleDefinitions/5a7f2348-00e1-480a-adf3-0e1f1a41b595.json new file mode 100644 index 000000000..c040cc52d --- /dev/null +++ b/RoleDefinitions/5a7f2348-00e1-480a-adf3-0e1f1a41b595.json @@ -0,0 +1,118 @@ +{ + "id": "5a7f2348-00e1-480a-adf3-0e1f1a41b595", + "description": "This role enables individual users to view and modify the basic configuration of their own mailbox and associated settings.", + "displayName": "MyBaseOptions", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AccessLabel -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AccessLabel -Constraints -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AccessLabel -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-InboxRule -AlwaysDeleteOutlookRulesBlob -ApplyCategory -ApplySystemCategory -BodyContainsWords -Confirm -CopyToFolder -DeleteMessage -DeleteSystemCategory -DisplayAlert -ErrorAction -ErrorVariable -ExceptIfBodyContainsWords -ExceptIfFlaggedForAction -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfHasAttachment -ExceptIfHasClassification -ExceptIfHeaderContainsWords -ExceptIfMessageTypeMatches -ExceptIfMyNameInCcBox -ExceptIfMyNameInToBox -ExceptIfMyNameInToOrCcBox -ExceptIfMyNameNotInToBox -ExceptIfReceivedAfterDate -ExceptIfReceivedBeforeDate -ExceptIfRecipientAddressContainsWords -ExceptIfSentOnlyToMe -ExceptIfSentTo -ExceptIfSubjectContainsWords -ExceptIfSubjectOrBodyContainsWords -ExceptIfWithImportance -ExceptIfWithinSizeRangeMaximum -ExceptIfWithinSizeRangeMinimum -ExceptIfWithSensitivity -FlaggedForAction -Force -ForwardAsAttachmentTo -ForwardTo -From -FromAddressContainsWords -HasAttachment -HasClassification -HeaderContainsWords -Identity -MarkAsRead -MarkImportance -MessageTypeMatches -MoveToFolder -MyNameInCcBox -MyNameInToBox -MyNameInToOrCcBox -MyNameNotInToBox -Name -OutBuffer -OutVariable -PinMessage -Priority -ReceivedAfterDate -ReceivedBeforeDate -RecipientAddressContainsWords -RedirectTo -SentOnlyToMe -SentTo -SoftDeleteMessage -StopProcessingRules -SubjectContainsWords -SubjectOrBodyContainsWords -WarningAction -WarningVariable -WhatIf -WithImportance -WithinSizeRangeMaximum -WithinSizeRangeMinimum -WithSensitivity", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-InboxRule -AlwaysDeleteOutlookRulesBlob -ApplyCategory -ApplySystemCategory -BodyContainsWords -Confirm -CopyToFolder -DeleteMessage -DeleteSystemCategory -DisplayAlert -ErrorAction -ErrorVariable -ExceptIfBodyContainsWords -ExceptIfFlaggedForAction -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfHasAttachment -ExceptIfHasClassification -ExceptIfHeaderContainsWords -ExceptIfMessageTypeMatches -ExceptIfMyNameInCcBox -ExceptIfMyNameInToBox -ExceptIfMyNameInToOrCcBox -ExceptIfMyNameNotInToBox -ExceptIfReceivedAfterDate -ExceptIfReceivedBeforeDate -ExceptIfRecipientAddressContainsWords -ExceptIfSentOnlyToMe -ExceptIfSentTo -ExceptIfSubjectContainsWords -ExceptIfSubjectOrBodyContainsWords -ExceptIfWithImportance -ExceptIfWithinSizeRangeMaximum -ExceptIfWithinSizeRangeMinimum -ExceptIfWithSensitivity -FlaggedForAction -Force -ForwardAsAttachmentTo -ForwardTo -From -FromAddressContainsWords -FromMessageId -HasAttachment -HasClassification -HeaderContainsWords -MarkAsRead -MarkImportance -MessageTypeMatches -MoveToFolder -MyNameInCcBox -MyNameInToBox -MyNameInToOrCcBox -MyNameNotInToBox -Name -OutBuffer -OutVariable -PinMessage -Priority -ReceivedAfterDate -ReceivedBeforeDate -RecipientAddressContainsWords -RedirectTo -SentOnlyToMe -SentTo -SoftDeleteMessage -StopProcessingRules -SubjectContainsWords -SubjectOrBodyContainsWords -ValidateOnly -WarningAction -WarningVariable -WhatIf -WithImportance -WithinSizeRangeMaximum -WithinSizeRangeMinimum -WithSensitivity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxCalendarConfiguration -AgendaMailEnabled -AgendaMailIntroductionEnabled -AgendaPaneEnabled -AutoDeclineWhenBusy -CalendarFeedsPreferredLanguage -CalendarFeedsPreferredRegion -CalendarFeedsRootPageId -Confirm -ConversationalSchedulingEnabled -CreateEventsFromEmailAsPrivate -DailyAgendaMailSchedule -DefaultMeetingDuration -DefaultMinutesToReduceLongEventsBy -DefaultMinutesToReduceShortEventsBy -DefaultOnlineMeetingProvider -DefaultReminderTime -DeleteMeetingRequestOnRespond -DiningEventsFromEmailEnabled -EntertainmentEventsFromEmailEnabled -ErrorAction -ErrorVariable -EventsFromEmailEnabled -FirstWeekOfYear -FlightEventsFromEmailEnabled -HotelEventsFromEmailEnabled -Identity -InvoiceEventsFromEmailEnabled -LocalEventsEnabled -LocalEventsLocation -LocationDetailsInFreeBusy -MailboxLocation -OnlineMeetingsByDefaultEnabled -OutBuffer -OutVariable -PackageDeliveryEventsFromEmailEnabled -PreserveDeclinedMeetings -RemindersEnabled -ReminderSoundEnabled -RentalCarEventsFromEmailEnabled -ServiceAppointmentEventsFromEmailEnabled -ShortenEventScopeDefault -ShowWeekNumbers -SkipAgendaMailOnFreeDays -TimeIncrement -UseBrightCalendarColorThemeInOwa -WarningAction -WarningVariable -WeatherEnabled -WeatherLocationBookmark -WeatherLocations -WeatherUnit -WeekStartDay -WhatIf -WorkDays -WorkingHoursEndTime -WorkingHoursStartTime -WorkingHoursTimeZone -WorkspaceUserEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxStatistics -Archive -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxJunkEmailConfiguration -BlockedSendersAndDomains -ContactsTrusted -Enabled -ErrorAction -ErrorVariable -FailOnError -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -SenderScreeningEnabled -TrustedListsOnly -TrustedRecipientsAndDomains -TrustedSendersAndDomains -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxMessageConfiguration -AfterMoveOrDeleteBehavior -AlwaysShowBcc -AlwaysShowFrom -AutoAddSignature -AutoAddSignatureOnMobile -AutoAddSignatureOnReply -CheckForForgottenAttachments -CheckForReportJunkDialog -Confirm -ConversationSortOrder -DefaultFontColor -DefaultFontFlags -DefaultFontName -DefaultFontSize -DefaultFormat -DefaultSignature -DefaultSignatureOnReply -DeleteSignatureName -DisplayDensityMode -EchoGroupMessageBackToSubscribedSender -EmailComposeMode -EmptyDeletedItemsOnLogoff -ErrorAction -ErrorVariable -FavoriteNodes -FavoritesBitFlags -FrequentlyUsedFolders -GlobalReadingPanePosition -HideDeletedItems -Identity -IgnoreDefaultScope -InboxPlusTabs -InboxPlusWatermarks -IsDarkModeTheme -IsFavoritesFolderTreeCollapsed -IsFocusedInboxEnabled -IsFocusedInboxOnAdminLastUpdateTime -IsFocusedInboxOnLastUpdateTime -IsMailRootFolderTreeCollapsed -IsReplyAllTheDefaultResponse -LinkPreviewEnabled -MailFolderPaneExpanded -MailSendUndoInterval -ManuallyPickCertificate -MruEmojis -NavigationBarWidth -NavigationPaneViewOption -NewEnabledPonts -NewItemNotification -OutBuffer -OutVariable -PreferAccessibleContent -PreviewMarkAsReadBehavior -PreviewMarkAsReadDelaytime -ReadReceiptResponse -ReportJunkSelected -SendAddressDefault -SendAsMruAddresses -ShowConversationAsTree -ShowInlinePreviews -ShowNotificationBar -ShowPreviewTextInListView -ShowReadingPaneOnFirstLoad -ShowSenderOnTopInListView -ShowUpNext -SignatureHtml -SignatureHtmlBody -SignatureName -SignatureText -SignatureTextOnMobile -SigningCertificateId -SigningCertificateSubject -SmimeEncrypt -SmimeSign -UseDefaultSignatureOnMobile -WarningAction -WarningVariable -WebSuggestedRepliesEnabledForUser -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxMessageConfiguration -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -SignatureName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-App -AppType -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -MailboxName -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SweepRule -Confirm -DestinationFolder -Enabled -ErrorAction -ErrorVariable -KeepForDays -KeepLatest -Name -OutBuffer -OutVariable -Provider -Sender -SourceFolder -SystemCategory -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SweepRule -Confirm -DestinationFolder -Enabled -ErrorAction -ErrorVariable -Identity -KeepForDays -KeepLatest -Name -OutBuffer -OutVariable -Provider -Sender -SourceFolder -SystemCategory -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-BookingMailboxPermission -Identity -Permission -StaffMember", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CalendarProcessing -AddAdditionalResponse -AdditionalResponse -AddNewRequestsTentatively -AddOrganizerToSubject -AllBookInPolicy -AllowConflicts -AllowRecurringMeetings -AllRequestInPolicy -AllRequestOutOfPolicy -AutomateProcessing -BookingType -BookingWindowInDays -BookInPolicy -Confirm -ConflictPercentageAllowed -DeleteAttachments -DeleteComments -DeleteNonCalendarItems -DeleteSubject -EnableAutoRelease -EnableResponseDetails -EnforceCapacity -EnforceSchedulingHorizon -ErrorAction -ErrorVariable -ForwardRequestsToDelegates -Identity -IgnoreDefaultScope -MaximumConflictInstances -MaximumDurationInMinutes -MinimumDurationInMinutes -OrganizerInfo -OutBuffer -OutVariable -PostReservationMaxClaimTimeInMinutes -ProcessExternalMeetingMessages -RemoveCanceledMeetings -RemoveForwardedMeetingNotifications -RemoveOldMeetingMessages -RemovePrivateProperty -RequestInPolicy -RequestOutOfPolicy -ResourceDelegates -ScheduleOnlyDuringWorkHours -TentativePendingApproval -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SweepRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Provider -ResultSize -SkipCount -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboxRule -DescriptionTimeFormat -DescriptionTimeZone -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -SkipCount -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxRegionalConfiguration -Archive -Confirm -DateFormat -ErrorAction -ErrorVariable -Identity -Language -LocalizeDefaultFolderName -MailboxLocation -OutBuffer -OutVariable -TimeFormat -TimeZone -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SchedulingMailbox -Alias -BookingServiceName -BusinessType -Confirm -Culture -DisplayName -ErrorAction -ErrorVariable -GenerateBookingServiceData -Name -NormalizedBusinessType -OrganizationalUnit -OutBuffer -OutVariable -Owner -PrimarySmtpAddress -ReplyToAddress -SkipInitialServiceCreation -TimeZone -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxRegionalConfiguration -Archive -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -VerifyDefaultFolderNameLanguage -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolderPermission -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -SkipCount -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BookingMailbox -AccessingUser -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AccessToCustomerDataRequest -ApprovalDecision -Comment -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -ResultSize -ServiceName -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AccessToCustomerDataRequest -ApprovalStatus -CreatedAfter -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarConfiguration -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -DeliverToMailboxAndForward -ErrorAction -ErrorVariable -ExternalOofOptions -ForwardingAddress -ForwardingSmtpAddress -GrantSendOnBehalfTo -Identity -Languages -MailTip -MailTipTranslations -MessageCopyForSendOnBehalfEnabled -MessageCopyForSentAsEnabled -MessageCopyForSMTPClientSubmissionEnabled -OutBuffer -OutVariable -Password -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -RequireSenderAuthenticationEnabled -UserCertificate -UserSMimeCertificate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionPolicy -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxFolderPermission -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -ResetDelegateUserCollection -SendNotificationToUser -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.Powershell.Support) Set-Clutter -CleanUpClutter -Enable -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Get-StoreDiagnosticInfo -ErrorAction -ErrorVariable -MailboxLocation -OutBuffer -OutVariable -Query -StoreMailboxIdentity -Unlimited -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Get-Clutter -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxSpellingConfiguration -CheckBeforeSend -Confirm -DictionaryLanguage -ErrorAction -ErrorVariable -Identity -IgnoreMixedDigits -IgnoreUppercase -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxFolderPermission -AccessRights -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendNotificationToUser -SharingPermissionFlags -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxCalendarFolder -Confirm -DetailLevel -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -PublishDateRangeFrom -PublishDateRangeTo -PublishEnabled -ResetUrl -SearchableUrlEnabled -SetAsSharingSource -SharedCalendarSyncStartDate -UseHttps -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxAutoReplyConfiguration -AutoDeclineFutureRequestsWhenOOF -AutoReplyState -Confirm -CreateOOFEvent -DeclineAllEventsForScheduledOOF -DeclineEventsForScheduledOOF -DeclineMeetingMessage -EndTime -ErrorAction -ErrorVariable -EventsToDeleteIDs -ExternalAudience -ExternalMessage -Identity -IgnoreDefaultScope -InternalMessage -OOFEventSubject -OutBuffer -OutVariable -Recipients -ReminderMessage -ReminderMinutesBeforeStart -StartTime -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -ErrorAction -ErrorVariable -Identity -MailTip -MailTipTranslations -OutBuffer -OutVariable -Password -ResetPasswordOnNextLogon -UserCertificate -UserSMimeCertificate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EventsFromEmailConfiguration -CreateEventsFromEmailAsPrivate -ErrorAction -ErrorVariable -EventReservationProcessingLevel -FlightReservationProcessingLevel -FoodEstablishmentReservationProcessingLevel -Identity -InvoiceProcessingLevel -LodgingReservationProcessingLevel -OutBuffer -OutVariable -ParcelDeliveryProcessingLevel -RentalCarReservationProcessingLevel -ResetSettings -ServiceReservationProcessingLevel -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ElevatedAccessRequest -Comment -Debug -Decision -ErrorAction -ErrorVariable -Organization -OutBuffer -OutVariable -RequestContext -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CASMailbox -ActiveSyncDebugLogging -ActiveSyncSuppressReadReceipt -Confirm -ErrorAction -ErrorVariable -Identity -ImapForceICalForCalendarRetrievalOption -ImapMessagesRetrievalMimeFormat -ImapSuppressReadReceipt -ImapUseProtocolDefaults -OutBuffer -OutVariable -PopForceICalForCalendarRetrievalOption -PopMessagesRetrievalMimeFormat -PopSuppressReadReceipt -PopUseProtocolDefaults -PublicFolderClientAccess -ShowGalAsDefaultView -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-MessageTrackingReport -Confirm -ErrorAction -ErrorVariable -Identity -MessageEntryId -MessageId -OutBuffer -OutVariable -Recipients -ResultSize -Sender -Subject -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Revoke-ElevatedAccessAuthorization -Comment -Debug -ErrorAction -ErrorVariable -Organization -OutBuffer -OutVariable -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Reset-EventsFromEmailBlockStatus -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MobileDevice -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ActiveSyncDevice -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PrivilegedIdentityManagementRequest -Debug -DurationHours -ErrorAction -ErrorVariable -ExternalIdentity -OutBuffer -OutVariable -Reason -RequestContext -Role -RoleGroup -Task -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxFolder -Confirm -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -Parent -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailMessage -Body -BodyFormat -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Subject -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ElevatedAccessRequest -Debug -DurationHours -ErrorAction -ErrorVariable -ExternalIdentity -OutBuffer -OutVariable -Reason -RequestContext -Role -RoleGroup -Task -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-RecipientDataProperty -Confirm -ErrorAction -ErrorVariable -FileData -Identity -OutBuffer -OutVariable -Picture -SpokenName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-ContactList -Confirm -CSV -CSVData -CSVStream -DateCultureName -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SendAddress -AddressId -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RbacDiagnosticInfo -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UserName -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnlineMeetingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceStatistics -ActiveSync -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -OutBuffer -OutVariable -OWAforDevices -RestApi -ShowRecoveryPassword -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDevice -ActiveSync -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -OWAforDevices -RestApi -SortBy -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrackingReport -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientPathFilter -Recipients -ReportTemplate -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -ErrorAction -ErrorVariable -Identity -IncludeLocales -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageCategory -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxSpellingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxOverrideConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxJunkEmailConfiguration -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolder -ErrorAction -ErrorVariable -GetChildren -Identity -MailFolderOnly -OutBuffer -OutVariable -Recurse -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarFolder -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAutoReplyConfiguration -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EventsFromEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ElevatedAccessRequest -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ElevatedAccessApprovalPolicy -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarProcessing -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -ActiveSyncDebugLogging -ActiveSyncSuppressReadReceipt -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProtocolSettings -ReadIsOptimizedForAccessibility -RecalculateHasActiveSyncDevicePartnership -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-App -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceStatistics -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -OutBuffer -OutVariable -ShowRecoveryPassword -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDevice -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-App -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-App -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Deny-ElevatedAccessRequest -Comment -Debug -ErrorAction -ErrorVariable -Organization -OutBuffer -OutVariable -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-MobileDevice -AccountOnly -Cancel -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-ActiveSyncDevice -Cancel -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Approve-ElevatedAccessRequest -Comment -Debug -ErrorAction -ErrorVariable -Organization -OutBuffer -OutVariable -RequestContext -RequestId -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-MailboxFolderPermission -AccessRights -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendNotificationToUser -SharingPermissionFlags -User -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5b5dab5b-0c93-4752-8c55-4e113230b23a.json b/RoleDefinitions/5b5dab5b-0c93-4752-8c55-4e113230b23a.json new file mode 100644 index 000000000..4639a810b --- /dev/null +++ b/RoleDefinitions/5b5dab5b-0c93-4752-8c55-4e113230b23a.json @@ -0,0 +1,20 @@ +{ + "id": "5b5dab5b-0c93-4752-8c55-4e113230b23a", + "description": null, + "displayName": "Insider Risk Management Admin", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDomainGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5c860b3d-8316-4d34-8a73-218a2668b591.json b/RoleDefinitions/5c860b3d-8316-4d34-8a73-218a2668b591.json new file mode 100644 index 000000000..9af51a6cb --- /dev/null +++ b/RoleDefinitions/5c860b3d-8316-4d34-8a73-218a2668b591.json @@ -0,0 +1,19 @@ +{ + "id": "5c860b3d-8316-4d34-8a73-218a2668b591", + "description": "Allows the app to use SMTP protocol to submit mail in all mailboxes without a signed-in user", + "displayName": "Application SMTP.SendAsApp", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "SMTP.SendAsApp" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5d335ffd-7cd7-4f80-9d30-d52b9393074f.json b/RoleDefinitions/5d335ffd-7cd7-4f80-9d30-d52b9393074f.json new file mode 100644 index 000000000..aa2a75d24 --- /dev/null +++ b/RoleDefinitions/5d335ffd-7cd7-4f80-9d30-d52b9393074f.json @@ -0,0 +1,20 @@ +{ + "id": "5d335ffd-7cd7-4f80-9d30-d52b9393074f", + "description": "", + "displayName": "MyAddressInformation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": false, + "templateId": "tplantcomau.onmicrosoft.com\\MyContactInformation", + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -City -CountryOrRegion -Fax -GeoCoordinates -Identity -Office -Phone -PostalCode -PostOfficeBox -StateOrProvince -StreetAddress" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5e4b8c30-8197-45b1-8995-a1068fee719c.json b/RoleDefinitions/5e4b8c30-8197-45b1-8995-a1068fee719c.json new file mode 100644 index 000000000..200b67085 --- /dev/null +++ b/RoleDefinitions/5e4b8c30-8197-45b1-8995-a1068fee719c.json @@ -0,0 +1,25 @@ +{ + "id": "5e4b8c30-8197-45b1-8995-a1068fee719c", + "description": "This role enables individual users to modify their contact information, including address and phone numbers.", + "displayName": "MyContactInformation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -City -CountryOrRegion -Fax -GeoCoordinates -HomePhone -Identity -MobilePhone -Office -Pager -Phone -PostalCode -PostOfficeBox -StateOrProvince -StreetAddress -WebPage", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-RecipientDataProperty -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5f545300-c976-4363-aff8-17a9d2302e5f.json b/RoleDefinitions/5f545300-c976-4363-aff8-17a9d2302e5f.json new file mode 100644 index 000000000..f2bf360ce --- /dev/null +++ b/RoleDefinitions/5f545300-c976-4363-aff8-17a9d2302e5f.json @@ -0,0 +1,40 @@ +{ + "id": "5f545300-c976-4363-aff8-17a9d2302e5f", + "description": "This role enables administrators to manage recipient policies, such as provisioning policies, in an organization.", + "displayName": "Recipient Policies", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DataEncryptionPolicy -AvailabilityKeyAzureKeyID -AvailabilityKeyBlob -AzureKeyIDs -Confirm -Debug -Description -DomainController -Enabled -ErrorAction -ErrorVariable -Force -Identity -Name -OutBuffer -OutVariable -PermanentDataPurgeContact -PermanentDataPurgeReason -PermanentDataPurgeRequested -Refresh -Replace -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OwaMailboxPolicy -AccountTransferEnabled -ActionForUnknownFileAndMIMETypes -ActiveSyncIntegrationEnabled -AdditionalAccountsEnabled -AdditionalStorageProvidersAvailable -AllAddressListsEnabled -AllowCopyContactsToDeviceAddressBook -AllowedFileTypes -AllowedMimeTypes -AllowedOrganizationAccountDomains -AllowOfflineOn -BizBarEnabled -BlockedFileTypes -BlockedMimeTypes -CalendarEnabled -ChangePasswordEnabled -ChangeSettingsAccountEnabled -ClassicAttachmentsEnabled -ConditionalAccessPolicy -Confirm -ContactsEnabled -DefaultClientLanguage -DefaultTheme -DelegateAccessEnabled -DirectFileAccessOnPrivateComputersEnabled -DirectFileAccessOnPublicComputersEnabled -DisableFacebook -DisplayPhotosEnabled -EmptyStateEnabled -ErrorAction -ErrorVariable -ExplicitLogonEnabled -ExternalImageProxyEnabled -ExternalSPMySiteHostURL -FacebookEnabled -FeedbackEnabled -ForceSaveAttachmentFilteringEnabled -ForceSaveFileTypes -ForceSaveMimeTypes -ForceWacViewingFirstOnPrivateComputers -ForceWacViewingFirstOnPublicComputers -FreCardsEnabled -GlobalAddressListEnabled -GroupCreationEnabled -HideClassicOutlookToggleOut -Identity -InstantMessagingEnabled -InstantMessagingType -InternalSPMySiteHostURL -IRMEnabled -IsDefault -ItemsToOtherAccountsEnabled -JournalEnabled -LinkedInEnabled -LogonAndErrorLanguage -MessagePreviewsDisabled -MonthlyUpdatesEnabled -Name -NotesEnabled -NpsSurveysEnabled -OfflineEnabledWeb -OfflineEnabledWin -OneDriveAttachmentsEnabled -OneWinNativeOutlookEnabled -OnSendAddinsEnabled -OrganizationEnabled -OutboundCharset -OutBuffer -OutlookBetaToggleEnabled -OutlookDataFile -OutlookNewslettersAccessLevel -OutlookNewslettersReactions -OutlookNewslettersShowMore -OutVariable -OWALightEnabled -PhoneticSupportEnabled -PremiumClientEnabled -PrintWithoutDownloadEnabled -PublicFoldersEnabled -RecoverDeletedItemsEnabled -ReferenceAttachmentsEnabled -RemindersAndNotificationsEnabled -ReportJunkEmailEnabled -RulesEnabled -SatisfactionEnabled -SaveAttachmentsToCloudEnabled -SearchFoldersEnabled -SetPhotoEnabled -SetPhotoURL -ShowOnlineArchiveEnabled -SignaturesEnabled -SilverlightEnabled -SkipCreateUnifiedGroupCustomSharepointClassification -SMimeSuppressNameChecksEnabled -SpellCheckerEnabled -TasksEnabled -TextMessagingEnabled -ThemeSelectionEnabled -UMIntegrationEnabled -UseGB18030 -UseISO885915 -UserVoiceEnabled -WacEditingEnabled -WacExternalServicesEnabled -WacOMEXEnabled -WacViewingOnPrivateComputersEnabled -WacViewingOnPublicComputersEnabled -WarningAction -WarningVariable -WebPartsFrameOptionsType -WhatIf -WSSAccessOnPrivateComputersEnabled -WSSAccessOnPublicComputersEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AuthenticationPolicy -AllowBasicAuthActiveSync -AllowBasicAuthAutodiscover -AllowBasicAuthImap -AllowBasicAuthMapi -AllowBasicAuthOfflineAddressBook -AllowBasicAuthOutlookService -AllowBasicAuthPop -AllowBasicAuthPowershell -AllowBasicAuthReportingWebServices -AllowBasicAuthRest -AllowBasicAuthRpc -AllowBasicAuthSmtp -AllowBasicAuthWebServices -AllowLegacyExchangeTokens -BlockLegacyExchangeTokens -Confirm -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuthenticationPolicy -AllowLegacyExchangeTokens -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DataEncryptionPolicy -AvailabilityKeyAzureKeyID -AvailabilityKeyBlob -AvailabilityKeyResourceGroupName -AvailabilityKeySubscriptionID -AzureKeyIDs -Confirm -Debug -Description -DomainController -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -ResourceGroupNames -SubscriptionIDs -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DataEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -DefaultAuthenticationPolicy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MobileDeviceMailboxPolicy -AllowApplePushNotifications -AllowBluetooth -AllowBrowser -AllowCamera -AllowConsumerEmail -AllowDesktopSync -AllowExternalDeviceManagement -AllowGooglePushNotifications -AllowHTMLEmail -AllowInternetSharing -AllowIrDA -AllowMicrosoftPushNotifications -AllowMobileOTAUpdate -AllowNonProvisionableDevices -AllowPOPIMAPEmail -AllowRemoteDesktop -AllowSimplePassword -AllowSMIMEEncryptionAlgorithmNegotiation -AllowSMIMESoftCerts -AllowStorageCard -AllowTextMessaging -AllowUnsignedApplications -AllowUnsignedInstallationPackages -AllowWiFi -AlphanumericPasswordRequired -ApprovedApplicationList -AttachmentsEnabled -Confirm -DeviceEncryptionEnabled -DevicePolicyRefreshInterval -ErrorAction -ErrorVariable -Identity -IrmEnabled -IsDefault -MaxAttachmentSize -MaxCalendarAgeFilter -MaxEmailAgeFilter -MaxEmailBodyTruncationSize -MaxEmailHTMLBodyTruncationSize -MaxInactivityTimeLock -MaxPasswordFailedAttempts -MinPasswordComplexCharacters -MinPasswordLength -Name -OutBuffer -OutVariable -PasswordEnabled -PasswordExpiration -PasswordHistory -PasswordRecoveryEnabled -RequireDeviceEncryption -RequireEncryptedSMIMEMessages -RequireEncryptionSMIMEAlgorithm -RequireManualSyncWhenRoaming -RequireSignedSMIMEAlgorithm -RequireSignedSMIMEMessages -RequireStorageCardEncryption -UnapprovedInROMApplicationList -UNCAccessEnabled -WarningAction -WarningVariable -WhatIf -WSSAccessEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ActiveSyncMailboxPolicy -AllowApplePushNotifications -AllowBluetooth -AllowBrowser -AllowCamera -AllowConsumerEmail -AllowDesktopSync -AllowExternalDeviceManagement -AllowHTMLEmail -AllowInternetSharing -AllowIrDA -AllowMobileOTAUpdate -AllowNonProvisionableDevices -AllowPOPIMAPEmail -AllowRemoteDesktop -AllowSimpleDevicePassword -AllowSMIMEEncryptionAlgorithmNegotiation -AllowSMIMESoftCerts -AllowStorageCard -AllowTextMessaging -AllowUnsignedApplications -AllowUnsignedInstallationPackages -AllowWiFi -AlphanumericDevicePasswordRequired -ApprovedApplicationList -AttachmentsEnabled -Confirm -DeviceEncryptionEnabled -DevicePasswordEnabled -DevicePasswordExpiration -DevicePasswordHistory -DevicePolicyRefreshInterval -ErrorAction -ErrorVariable -Identity -IrmEnabled -IsDefault -IsDefaultPolicy -MaxAttachmentSize -MaxCalendarAgeFilter -MaxDevicePasswordFailedAttempts -MaxEmailAgeFilter -MaxEmailBodyTruncationSize -MaxEmailHTMLBodyTruncationSize -MaxInactivityTimeDeviceLock -MinDevicePasswordComplexCharacters -MinDevicePasswordLength -Name -OutBuffer -OutVariable -PasswordRecoveryEnabled -RequireDeviceEncryption -RequireEncryptedSMIMEMessages -RequireEncryptionSMIMEAlgorithm -RequireManualSyncWhenRoaming -RequireSignedSMIMEAlgorithm -RequireSignedSMIMEMessages -RequireStorageCardEncryption -UnapprovedInROMApplicationList -UNCAccessEnabled -WarningAction -WarningVariable -WhatIf -WSSAccessEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OwaMailboxPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MobileDeviceMailboxPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ActiveSyncMailboxPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OwaMailboxPolicy -Confirm -ErrorAction -ErrorVariable -IsDefault -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MobileDeviceMailboxPolicy -AllowApplePushNotifications -AllowBluetooth -AllowBrowser -AllowCamera -AllowConsumerEmail -AllowDesktopSync -AllowExternalDeviceManagement -AllowGooglePushNotifications -AllowHTMLEmail -AllowInternetSharing -AllowIrDA -AllowMicrosoftPushNotifications -AllowMobileOTAUpdate -AllowNonProvisionableDevices -AllowPOPIMAPEmail -AllowRemoteDesktop -AllowSimplePassword -AllowSMIMEEncryptionAlgorithmNegotiation -AllowSMIMESoftCerts -AllowStorageCard -AllowTextMessaging -AllowUnsignedApplications -AllowUnsignedInstallationPackages -AllowWiFi -AlphanumericPasswordRequired -ApprovedApplicationList -AttachmentsEnabled -Confirm -DeviceEncryptionEnabled -DevicePolicyRefreshInterval -ErrorAction -ErrorVariable -IrmEnabled -IsDefault -MaxAttachmentSize -MaxCalendarAgeFilter -MaxEmailAgeFilter -MaxEmailBodyTruncationSize -MaxEmailHTMLBodyTruncationSize -MaxInactivityTimeLock -MaxPasswordFailedAttempts -MinPasswordComplexCharacters -MinPasswordLength -Name -OutBuffer -OutVariable -PasswordEnabled -PasswordExpiration -PasswordHistory -PasswordRecoveryEnabled -RequireDeviceEncryption -RequireEncryptedSMIMEMessages -RequireEncryptionSMIMEAlgorithm -RequireManualSyncWhenRoaming -RequireSignedSMIMEAlgorithm -RequireSignedSMIMEMessages -RequireStorageCardEncryption -UnapprovedInROMApplicationList -UNCAccessEnabled -WarningAction -WarningVariable -WhatIf -WSSAccessEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AuthenticationPolicy -AllowBasicAuthActiveSync -AllowBasicAuthAutodiscover -AllowBasicAuthImap -AllowBasicAuthLogExport -AllowBasicAuthMapi -AllowBasicAuthOfflineAddressBook -AllowBasicAuthOutlookService -AllowBasicAuthPop -AllowBasicAuthPowershell -AllowBasicAuthReportingWebServices -AllowBasicAuthRest -AllowBasicAuthRpc -AllowBasicAuthSmtp -AllowBasicAuthWebServices -Confirm -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ActiveSyncMailboxPolicy -AllowApplePushNotifications -AllowBluetooth -AllowBrowser -AllowCamera -AllowConsumerEmail -AllowDesktopSync -AllowExternalDeviceManagement -AllowHTMLEmail -AllowInternetSharing -AllowIrDA -AllowMobileOTAUpdate -AllowNonProvisionableDevices -AllowPOPIMAPEmail -AllowRemoteDesktop -AllowSimpleDevicePassword -AllowSMIMEEncryptionAlgorithmNegotiation -AllowSMIMESoftCerts -AllowStorageCard -AllowTextMessaging -AllowUnsignedApplications -AllowUnsignedInstallationPackages -AllowWiFi -AlphanumericDevicePasswordRequired -ApprovedApplicationList -AttachmentsEnabled -Confirm -DeviceEncryptionEnabled -DevicePasswordEnabled -DevicePasswordExpiration -DevicePasswordHistory -DevicePolicyRefreshInterval -ErrorAction -ErrorVariable -IrmEnabled -IsDefault -IsDefaultPolicy -MaxAttachmentSize -MaxCalendarAgeFilter -MaxDevicePasswordFailedAttempts -MaxEmailAgeFilter -MaxEmailBodyTruncationSize -MaxEmailHTMLBodyTruncationSize -MaxInactivityTimeDeviceLock -MinDevicePasswordComplexCharacters -MinDevicePasswordLength -Name -OutBuffer -OutVariable -PasswordRecoveryEnabled -RequireDeviceEncryption -RequireEncryptedSMIMEMessages -RequireEncryptionSMIMEAlgorithm -RequireManualSyncWhenRoaming -RequireSignedSMIMEAlgorithm -RequireSignedSMIMEMessages -RequireStorageCardEncryption -UnapprovedInROMApplicationList -UNCAccessEnabled -WarningAction -WarningVariable -WhatIf -WSSAccessEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OwaMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OrganizationalUnit -OutBuffer -OutVariable -ProtocolSettings -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/5fe9edfe-dfcc-4e05-ad0a-81358594a674.json b/RoleDefinitions/5fe9edfe-dfcc-4e05-ad0a-81358594a674.json new file mode 100644 index 000000000..08e0385fc --- /dev/null +++ b/RoleDefinitions/5fe9edfe-dfcc-4e05-ad0a-81358594a674.json @@ -0,0 +1,19 @@ +{ + "id": "5fe9edfe-dfcc-4e05-ad0a-81358594a674", + "description": "Allows the app to create, read, update, and delete events of all calendars without a signed-in user", + "displayName": "Application Calendars.ReadWrite", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Calendars.ReadWrite" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/63d7cc23-a59d-4141-a806-85acf03cf052.json b/RoleDefinitions/63d7cc23-a59d-4141-a806-85acf03cf052.json new file mode 100644 index 000000000..81d327f7a --- /dev/null +++ b/RoleDefinitions/63d7cc23-a59d-4141-a806-85acf03cf052.json @@ -0,0 +1,44 @@ +{ + "id": "63d7cc23-a59d-4141-a806-85acf03cf052", + "description": "This role enables administrators to manage cross-forest and cross-organization sharing in an organization.", + "displayName": "Federated Sharing", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AvailabilityConfig -AllowedTenantIds -Confirm -ErrorAction -ErrorVariable -OrgWideAccount -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AvailabilityConfig -AllowedTenantIds -Confirm -ErrorAction -ErrorVariable -OrgWideAccount -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-AvailabilityAddressSpace -AccessMethod -Confirm -Credentials -ErrorAction -ErrorVariable -ForestName -OutBuffer -OutVariable -TargetAutodiscoverEpr -TargetServiceEpr -TargetTenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SharingPolicy -Confirm -Default -Domains -Enabled -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationRelationship -ArchiveAccessEnabled -Confirm -DeliveryReportEnabled -DomainNames -Enabled -ErrorAction -ErrorVariable -Force -FreeBusyAccessEnabled -FreeBusyAccessLevel -FreeBusyAccessScope -Identity -MailboxMoveEnabled -MailTipsAccessEnabled -MailTipsAccessLevel -MailTipsAccessScope -Name -OrganizationContact -OutBuffer -OutVariable -PhotosEnabled -TargetApplicationUri -TargetAutodiscoverEpr -TargetOwaURL -TargetSharingEpr -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -CalendarVersionStoreEnabled -PublicComputersDetectionEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-IntraOrganizationConnector -Confirm -DiscoveryEndpoint -Enabled -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -TargetAddressDomains -TargetSharingEpr -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-FederatedOrganizationIdentifier -AccountNamespace -Confirm -DefaultDomain -DelegationFederationTrust -Enabled -ErrorAction -ErrorVariable -Identity -OrganizationContact -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SharingPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OrganizationRelationship -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-IntraOrganizationConnector -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AvailabilityConfig -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AvailabilityAddressSpace -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SharingPolicy -Confirm -Default -Domains -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OrganizationRelationship -ArchiveAccessEnabled -Confirm -DeliveryReportEnabled -DomainNames -Enabled -ErrorAction -ErrorVariable -FreeBusyAccessEnabled -FreeBusyAccessLevel -FreeBusyAccessScope -MailboxMoveEnabled -MailTipsAccessEnabled -MailTipsAccessLevel -MailTipsAccessScope -Name -OrganizationContact -OutBuffer -OutVariable -PhotosEnabled -TargetApplicationUri -TargetAutodiscoverEpr -TargetOwaURL -TargetSharingEpr -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-IntraOrganizationConnector -Confirm -DiscoveryEndpoint -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -TargetAddressDomains -TargetSharingEpr -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SharingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationRelationship -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConfiguration -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederationTrust -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederationInformation -BypassAdditionalDomainValidation -DomainName -ErrorAction -ErrorVariable -Force -OutBuffer -OutVariable -TrustedHostnames -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederatedOrganizationIdentifier -ErrorAction -ErrorVariable -Identity -IncludeExtendedDomainInfo -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AvailabilityConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AvailabilityAddressSpace -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/66ebed3a-35f6-4230-b8ae-530f1e8ae002.json b/RoleDefinitions/66ebed3a-35f6-4230-b8ae-530f1e8ae002.json new file mode 100644 index 000000000..cd28f7308 --- /dev/null +++ b/RoleDefinitions/66ebed3a-35f6-4230-b8ae-530f1e8ae002.json @@ -0,0 +1,19 @@ +{ + "id": "66ebed3a-35f6-4230-b8ae-530f1e8ae002", + "description": "Allows the app to send mail as any user without a signed-in user", + "displayName": "Application Mail.Send", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Mail.Send" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/69091246-20e8-4a56-aa4d-066075b2a7a8.json b/RoleDefinitions/69091246-20e8-4a56-aa4d-066075b2a7a8.json index 44c4722f5..810d4f3a0 100644 --- a/RoleDefinitions/69091246-20e8-4a56-aa4d-066075b2a7a8.json +++ b/RoleDefinitions/69091246-20e8-4a56-aa4d-066075b2a7a8.json @@ -30,6 +30,7 @@ "microsoft.directory/externalUserProfiles/delete", "microsoft.directory/externalUserProfiles/standard/read", "microsoft.directory/groups/hiddenMembers/read", + "microsoft.directory/groups.unified/assignedLabels/update", "microsoft.directory/groups.unified/basic/update", "microsoft.directory/groups.unified/create", "microsoft.directory/groups.unified/delete", diff --git a/RoleDefinitions/693d7d22-4776-44f1-bc3e-7ba65d552d3a.json b/RoleDefinitions/693d7d22-4776-44f1-bc3e-7ba65d552d3a.json new file mode 100644 index 000000000..c62d7fe11 --- /dev/null +++ b/RoleDefinitions/693d7d22-4776-44f1-bc3e-7ba65d552d3a.json @@ -0,0 +1,38 @@ +{ + "id": "693d7d22-4776-44f1-bc3e-7ba65d552d3a", + "description": "This role enables individual users to view and modify their voice mail settings.", + "displayName": "MyVoiceMail", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-UMPhoneSession -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-UMPhoneSession -AwayVoicemailGreeting -CallAnsweringRuleId -Confirm -DefaultVoicemailGreeting -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PhoneNumber -UMMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailboxPIN -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Pin -PinExpired -SendEmail -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailboxConfiguration -Confirm -DefaultPlayOnPhoneNumber -ErrorAction -ErrorVariable -FolderToReadEmailsFrom -Greeting -Identity -OutBuffer -OutVariable -ReadOldestUnreadVoiceMessagesFirst -ReceivedVoiceMailPreviewEnabled -SentVoiceMailPreviewEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailbox -Confirm -ErrorAction -ErrorVariable -Identity -ImListMigrationCompleted -MissedCallNotificationEnabled -OutBuffer -OutVariable -PinlessAccessToVoiceMailEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMCallAnsweringRule -CallerIds -CallersCanInterruptGreeting -CheckAutomaticReplies -Confirm -ErrorAction -ErrorVariable -ExtensionsDialed -Identity -KeyMappings -Name -OutBuffer -OutVariable -Priority -ScheduleStatus -TimeOfDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-UMCallAnsweringRule -CallerIds -CallersCanInterruptGreeting -CheckAutomaticReplies -Confirm -ErrorAction -ErrorVariable -ExtensionsDialed -KeyMappings -Name -OutBuffer -OutVariable -Priority -ScheduleStatus -TimeOfDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMPhoneSession -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallAnsweringRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/69a29029-a855-46cf-a546-33a3288c5e45.json b/RoleDefinitions/69a29029-a855-46cf-a546-33a3288c5e45.json new file mode 100644 index 000000000..46fe096d8 --- /dev/null +++ b/RoleDefinitions/69a29029-a855-46cf-a546-33a3288c5e45.json @@ -0,0 +1,19 @@ +{ + "id": "69a29029-a855-46cf-a546-33a3288c5e45", + "description": "Allows the app to read email except the body, previewBody, attachments, and any extended properties in all mailboxes without a signed-in user", + "displayName": "Application Mail.ReadBasic", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Mail.ReadBasic" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/6a8e6342-4e47-4c75-8a7d-24fb6aaba97b.json b/RoleDefinitions/6a8e6342-4e47-4c75-8a7d-24fb6aaba97b.json new file mode 100644 index 000000000..df5873a6a --- /dev/null +++ b/RoleDefinitions/6a8e6342-4e47-4c75-8a7d-24fb6aaba97b.json @@ -0,0 +1,19 @@ +{ + "id": "6a8e6342-4e47-4c75-8a7d-24fb6aaba97b", + "description": null, + "displayName": "Communication Compliance Admin", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/6b6d4092-9219-4092-99e8-4ba3b4142322.json b/RoleDefinitions/6b6d4092-9219-4092-99e8-4ba3b4142322.json new file mode 100644 index 000000000..e5dbe0555 --- /dev/null +++ b/RoleDefinitions/6b6d4092-9219-4092-99e8-4ba3b4142322.json @@ -0,0 +1,189 @@ +{ + "id": "6b6d4092-9219-4092-99e8-4ba3b4142322", + "description": null, + "displayName": "O365SupportViewConfig", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SmimeConfig -Confirm -Debug -Identity -OWAAllowUserChoiceOfSigningCertificate -OWAAlwaysEncrypt -OWAAlwaysSign -OWABCCEncryptedEmailForking -OWACheckCRLOnSend -OWAClearSign -OWACopyRecipientHeaders -OWACRLConnectionTimeout -OWACRLRetrievalTimeout -OWADisableCRLCheck -OWADLExpansionTimeout -OWAEncryptionAlgorithms -OWAEncryptTemporaryBuffers -OWAForceSMIMEClientUpgrade -OWAIncludeCertificateChainAndRootCertificate -OWAIncludeCertificateChainWithoutRootCertificate -OWAIncludeSMIMECapabilitiesInMessage -OWANoSignOnReply -OWAOnlyUseSmartCard -OWASenderCertificateAttributesToDisplay -OWASignedEmailCertificateInclusion -OWASigningAlgorithms -OWATripleWrapSignedEncryptedMail -OWAUseKeyIdentifier -OWAUseSecondaryProxiesWhenFindingCertificates -SMIMECertificateIssuingCA -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationConfig -AllPartitions -ErrorAction -ErrorVariable -IncludeSimplifiedGmailMigrationData -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IPv6StatusForAcceptedDomain -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuthenticationPolicy -AllowLegacyExchangeTokens -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -TenantId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmtpDaneInboundStatus -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -Ids -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -LogExtraDetails -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -SubmissionID -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DnssecStatusForVerifiedDomain -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -SkipDnsValidation -SkipMtaStsValidation -SkipMxValidation -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleAssignment -AssignmentMethod -ConfigWriteScope -CustomRecipientWriteScope -Delegating -Enabled -ErrorAction -ErrorVariable -Exclusive -ExclusiveRecipientWriteScope -GetEffectiveUsers -Identity -OutBuffer -OutVariable -RecipientAdministrativeUnitScope -RecipientGroupScope -RecipientOrganizationalUnitScope -RecipientWriteScope -Role -RoleAssignee -RoleAssigneeType -WarningAction -WarningVariable -WritableRecipient", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -State -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationBatch -DiagnosticInfo -Endpoint -ErrorAction -ErrorVariable -Identity -IncludeReport -LimitErrorsTo -OutBuffer -OutVariable -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CalendarSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EtrLimits -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRoleEntry -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Parameters -PSSnapinName -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdministrativeUnitExtension -AdministrativeUnits -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceTag -ErrorAction -Identity -IncludingLabelState -PriorityCleanup", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdaptiveScope -AdministrativeUnits -ErrorAction -Identity -LocationTypes", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RemoteDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutboundConnector -ErrorAction -ErrorVariable -Identity -IncludeTestModeConnectors -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboundConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.Powershell.Support) Test-DlpPolicies -ExecutionMode -FileUniqueId -FileUrl -SendReportTo -SiteId -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-LabelProperties -ApplyToUsers -GrantAccessToAllCompanyDomainUsers -GrantAccessToAllUsers -GrantAccessToNoUsers -Identity -Verbose", + "(Microsoft.Exchange.Management.Powershell.Support) Test-Message -Confirm -Force -MessageFileData -Recipients -Sender -SendReportTo -TransportRules -UnifiedDLPRules -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUser -BatchId -EmailAddress -ErrorAction -ErrorVariable -Identity -IncludeAssociatedUsers -MailboxGuid -OutBuffer -OutVariable -ResultSize -Status -StatusSummary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ArcConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPEvaluationRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPBuiltInProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListItems -Allow -Block -Entry -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListItems -Entries -ErrorAction -ErrorVariable -Ids -InformationAction -InformationVariable -ListSubType -ListType -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantinePolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantinePolicyType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EmailTenantSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ExternalInOutlook -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalInOutlook -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-TransportRuleCollection -Confirm -ErrorAction -ErrorVariable -Format -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofIntelligenceInsight -AllowedToSpoof -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Validate-RetentionRuleQuery -ErrorAction -KqlQueryString", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-OrganizationRelationship -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UserIdentity -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Sync-TenantAllowBlockListItems -ErrorAction -ErrorVariable -InformationAction -InformationVariable -ListType -OutBuffer -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RegulatoryComplianceUI -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ProtectionServicePolicy -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditConfigurationRule -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditConfigurationPolicy -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ProtectionServicePolicy -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ProtectionAlert -Debug", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ActivityAlert -Debug -DomainController", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMIPGateway -ErrorAction -ErrorVariable -Identity -IncludeSimulator -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMHuntGroup -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMDialPlan -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallSummaryReport -ErrorAction -ErrorVariable -GroupBy -OutBuffer -OutVariable -UMDialPlan -UMIPGateway -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMAutoAttendant -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRulePredicate -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRuleAction -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRule -DlpPolicy -ErrorAction -ErrorVariable -ExcludeConditionActionDetails -Filter -Identity -OutBuffer -OutVariable -ResultSize -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ToolInformation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Version -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewRule -ErrorAction -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -Reviewers -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyV2 -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewActivity -EndDate -ErrorAction -PolicyId -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmimeConfig -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SharingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceStatus -ErrorAction -ErrorVariable -MaintenanceWindowDays -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SendAddress -AddressId -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SearchDocumentFormat -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleGroupMember -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleGroup -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -ShowPartnerLinked -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RoleAssignmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicyTag -ErrorAction -ErrorVariable -Identity -IncludeSystemTags -Mailbox -OptionalInMailbox -OutBuffer -OutVariable -Types -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RecipientStatisticsReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RbacDiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ProtectionAlert -Debug -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyTipConfig -Action -ErrorAction -ErrorVariable -Identity -Locale -Original -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PartnerApplication -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OwaMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutlookProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationRelationship -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnPremisesOrganization -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Notification -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProcessType -ResultSize -StartDate -Summary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUserStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -LimitSkippedItemsTo -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationEndpoint -Confirm -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageCategory -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementScope -ErrorAction -ErrorVariable -Exclusive -Identity -Orphan -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ManagementRole -Cmdlet -CmdletParameters -ErrorAction -ErrorVariable -GetChildren -Identity -OutBuffer -OutVariable -Recurse -RoleType -Script -ScriptParameters -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAuditBypassAssociation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JournalRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConfiguration -ErrorAction -ErrorVariable -OrganizationGuid -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IRMConfiguration -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HybridMailflowDatacenterIPs -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HybridMailflow -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterPolicy -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedConnectionFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederationTrust -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederationInformation -BypassAdditionalDomainValidation -DomainName -ErrorAction -ErrorVariable -Force -OutBuffer -OutVariable -TrustedHostnames -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FederatedOrganizationIdentifier -ErrorAction -ErrorVariable -Identity -IncludeExtendedDomainInfo -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FailedContentIndexDocuments -Archive -Confirm -EndDate -ErrorAction -ErrorCode -ErrorVariable -FailureMode -Identity -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EOPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpPolicyTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DkimSigningConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceTenantRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceTenantPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DevicePolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConfigurationRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConfigurationPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConditionalAccessRule -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceConditionalAccessPolicy -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassificationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassification -ClassificationRuleCollectionIdentity -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConfigAnalyzerPolicyRecommendation -ErrorAction -ErrorVariable -Identity -IsAppliedToDisabled -OutBuffer -OutVariable -RecommendedPolicyType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceTagStorage -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceSecurityFilter -Action -ErrorAction -ErrorVariable -FilterName -OutBuffer -OutVariable -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceBoundary -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ClassificationRuleCollection -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuthServer -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditLogSearch -CreatedAfter -CreatedBefore -Debug -ErrorAction -ErrorVariable -Identity -ResultSize -Type -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfigurationRule -ErrorAction -ErrorVariable -Identity -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfigurationPolicy -ErrorAction -ErrorVariable -Identity -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditConfig -ErrorAction -ErrorVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AtpPolicyForO365 -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-App -ErrorAction -ErrorVariable -Identity -Mailbox -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiSpoofingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishPolicy -Advanced -ErrorAction -ErrorVariable -Identity -Impersonation -OutBuffer -OutVariable -Spoof -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdministrativeUnit -Debug -DisplayName -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdminAuditLogConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressBookPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActivityAlert -Debug -DomainController -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncOrganizationSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceClass -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceAccessRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-UMCallDataRecord -ClientStream -Confirm -Date -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UMDialPlan -UMIPGateway -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/6cb3ee7b-2d83-4729-b2b0-d3b37f2610f7.json b/RoleDefinitions/6cb3ee7b-2d83-4729-b2b0-d3b37f2610f7.json new file mode 100644 index 000000000..c477ac1f3 --- /dev/null +++ b/RoleDefinitions/6cb3ee7b-2d83-4729-b2b0-d3b37f2610f7.json @@ -0,0 +1,19 @@ +{ + "id": "6cb3ee7b-2d83-4729-b2b0-d3b37f2610f7", + "description": "Allows the app to read email in all mailboxes without a signed-in user", + "displayName": "Application Mail.Read", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Mail.Read" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/6cee0253-1b96-4147-ad9b-47bceb22056c.json b/RoleDefinitions/6cee0253-1b96-4147-ad9b-47bceb22056c.json new file mode 100644 index 000000000..991db6b55 --- /dev/null +++ b/RoleDefinitions/6cee0253-1b96-4147-ad9b-47bceb22056c.json @@ -0,0 +1,59 @@ +{ + "id": "6cee0253-1b96-4147-ad9b-47bceb22056c", + "description": "Lets people manage retention policies.", + "displayName": "Retention Management", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-ArchiveConnectivity -AllowCrossSite -Confirm -ErrorAction -ErrorVariable -IncludeArchiveMRMConfiguration -MessageId -OutBuffer -OutVariable -UserSmtp -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -AccountDisabled -ElcProcessingDisabled -EnableRoomMailboxAccount -EndDateForRetentionHold -EnforcedTimestamps -ErrorAction -ErrorVariable -ExcludeFromAllOrgHolds -ExcludeFromOrgHolds -GroupMailbox -Identity -InactiveMailbox -LitigationHoldDate -LitigationHoldDuration -LitigationHoldEnabled -LitigationHoldOwner -NonCompliantDevices -OutBuffer -OutVariable -RecalculateInactiveMailbox -RemoveDelayHoldApplied -RemoveDelayReleaseHoldApplied -RemoveOrphanedHolds -RetentionComment -RetentionHoldEnabled -RetentionPolicy -RetentionUrl -SingleItemRecoveryEnabled -StartDateForRetentionHold -StsRefreshTokensValidFrom -UpdateEnforcedTimestamp -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-ManagedFolderAssistant -AdaptiveScope -AggMailboxCleanup -B2DumpsterArchiver -B2IPMArchiver -ComplianceJob -Confirm -DataGovernance -ErrorAction -ErrorVariable -FullCrawl -HoldCleanup -Identity -InactiveMailbox -OutBuffer -OutVariable -StopHoldCleanup -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicyHoldInfo -Identity -Organization -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -EnableLitigationHoldForMigration -ExcludeFromAllOrgHolds -ExcludeFromOrgHolds -Identity -RecalculateInactiveMailUser -RemoveComplianceTagHoldApplied -RemoveDelayHoldApplied -RemoveDelayReleaseHoldApplied -RemoveDisabledArchive -RemoveLitigationHoldEnabled -RemoveOrphanedHolds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RetentionPolicyTag -AgeLimitForRetention -Comment -Confirm -ErrorAction -ErrorVariable -Force -Identity -LegacyManagedFolder -LocalizedComment -LocalizedRetentionPolicyTagName -Mailbox -MessageClass -MustDisplayCommentEnabled -Name -OptionalInMailbox -OutBuffer -OutVariable -RetentionAction -RetentionEnabled -RetentionId -SystemTag -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RetentionPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -IsDefault -IsDefaultArbitrationMailbox -Name -OutBuffer -OutVariable -RetentionId -RetentionPolicyTagLinks -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxLocation -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxJunkEmailConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RetentionPolicyTag -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RetentionPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-RetentionPolicyTag -AgeLimitForRetention -Comment -Confirm -ErrorAction -ErrorVariable -IsDefaultAutoGroupPolicyTag -IsDefaultModeratedRecipientsPolicyTag -LocalizedComment -LocalizedRetentionPolicyTagName -MessageClass -MustDisplayCommentEnabled -Name -OutBuffer -OutVariable -RetentionAction -RetentionEnabled -RetentionId -SystemTag -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-RetentionPolicy -Confirm -ErrorAction -ErrorVariable -IsDefault -IsDefaultArbitrationMailbox -Name -OutBuffer -OutVariable -RetentionId -RetentionPolicyTagLinks -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-Mailbox -EnableRoomMailboxAccount", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicyTag -ErrorAction -ErrorVariable -Identity -IncludeSystemTags -Mailbox -OptionalInMailbox -OutBuffer -OutVariable -Types -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxJunkEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailUser -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailContact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataRetentionReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Contact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -RecipientTypeDetails" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/6e536206-5c88-498e-8244-4a49be400fb0.json b/RoleDefinitions/6e536206-5c88-498e-8244-4a49be400fb0.json new file mode 100644 index 000000000..553a58ba7 --- /dev/null +++ b/RoleDefinitions/6e536206-5c88-498e-8244-4a49be400fb0.json @@ -0,0 +1,42 @@ +{ + "id": "6e536206-5c88-498e-8244-4a49be400fb0", + "description": "This role enables administrators to manage the cmdlet audit logging in an organization.", + "displayName": "Audit Logs", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantMailFromAddress -ApplicationId -FromAddress -OrganizationId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-UnifiedAuditLog -Debug -EndDate -ErrorAction -ErrorVariable -Formatted -FreeText -HighCompleteness -IPAddresses -LongerRetentionEnabled -ObjectIds -Operations -OutBuffer -OutVariable -RecordType -ResultSize -SessionCommand -SessionId -SiteIds -StartDate -UserIds -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Organization -Confirm -Force -UnifiedAuditLogIngestionEnabled -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxAuditBypassAssociation -AuditBypassEnabled -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -AuditAdmin -AuditDelegate -AuditEnabled -AuditLogAgeLimit -AuditOwner -DefaultAuditSet -Force -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AdminAuditLogConfig -Confirm -Force -UnifiedAuditLogIngestionEnabled -Verbose -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-MailboxAuditLog -EndDate -ErrorAction -ErrorVariable -ExternalAccess -GroupMailbox -HasAttachments -Identity -IncludeInactiveMailbox -LogonTypes -Mailboxes -Operations -OutBuffer -OutVariable -ResultSize -ShowDetails -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-AdminAuditLog -Cmdlets -EndDate -ErrorAction -ErrorVariable -ExternalAccess -IsSuccess -ObjectIds -OutBuffer -OutVariable -Parameters -ResultSize -StartDate -StartIndex -UserIds -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AuditStubFolder -Confirm -FolderName -Verbose -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxAuditLogSearch -Confirm -EndDate -ErrorAction -ErrorVariable -ExternalAccess -GroupMailbox -HasAttachments -LogonTypes -Mailboxes -Name -Operations -OutBuffer -OutVariable -ShowDetails -StartDate -StatusMailRecipients -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AdminAuditLogSearch -Cmdlets -Confirm -EndDate -ErrorAction -ErrorVariable -ExternalAccess -Name -ObjectIds -OutBuffer -OutVariable -Parameters -StartDate -StatusMailRecipients -UserIds -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAuditBypassAssociation -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AuditLogSearch -CreatedAfter -CreatedBefore -Debug -ErrorAction -ErrorVariable -Identity -ResultSize -Type -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdminAuditLogConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/70ec3272-00b1-4128-a6c6-c9242c49c0f8.json b/RoleDefinitions/70ec3272-00b1-4128-a6c6-c9242c49c0f8.json new file mode 100644 index 000000000..e30679d31 --- /dev/null +++ b/RoleDefinitions/70ec3272-00b1-4128-a6c6-c9242c49c0f8.json @@ -0,0 +1,246 @@ +{ + "id": "70ec3272-00b1-4128-a6c6-c9242c49c0f8", + "description": "This role enables administrators to view the configuration of recipients, such as mailboxes, mail users, mail contacts, distribution groups, and dynamic distribution groups. \r\nThis role can be combined with roles associated with the ViewOnlyConfiguration role type to create a role group that can view every object in the organization.", + "displayName": "View-Only Recipients", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnPremServerExemptionQuota -IncludeHistory -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPermission -Credential -ErrorAction -ErrorVariable -GroupMailbox -Identity -IncludeSoftDeletedUserPermissions -IncludeUnresolvedPermissions -IncludeUserWithDisplayName -OutBuffer -OutVariable -Owner -ReadFromDomainController -ResultSize -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarDiagnosticObjects -AnalyzeExceptionWithOriginalStartDate -AutoRequeryOnMeetingId -ConfigurationName -CustomPropertyNames -EndDate -EntryId -EwsId -ExactMatch -Identity -ItemClass -ItemIds -Latest -LogLocation -MaxResults -MeetingId -ODataId -OutBuffer -OutVariable -ResultSize -ShouldBindToItem -ShouldDecodeEnums -ShouldFetchAttendeeCollection -ShouldFetchRecurrenceExceptions -ShouldResolveParticipants -StartDate -Subject -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficATPReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -NumberOfRows -OutBuffer -OutVariable -Page -PageSize -PivotBy -ProbeTag -StartDate -SummarizeBy -ThreatClassification -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailPublicFolder -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -IncludeGrantSendOnBehalfToWithDisplayNames -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AccessLabel -Identity -Type", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetailV2 -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceV2 -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -ResultSize -SenderAddress -StartDate -StartingRecipientAddress -Status -Subject -SubjectFilterType -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TDPReport -EndDate -ErrorAction -ErrorVariable -HVEAccountAddress -OutBuffer -OutVariable -ProbeTag -ReportType -ResultSize -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantRecipientLimitInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessage -Confirm -Direction -Domain -EndExpiresDate -EndReceivedDate -ErrorAction -ErrorVariable -Identity -IncludeMessagesFromBlockedSenderAddress -MessageId -MoveToQuarantineAdminActionTakenBy -MoveToQuarantineApprovalId -MyItems -OutBuffer -OutVariable -Page -PageSize -PolicyName -PolicyTypes -QuarantineTypes -RecipientAddress -RecipientTag -ReleaseStatus -Reported -SearchOnlyDeletedMessages -SenderAddress -StartExpiresDate -StartReceivedDate -Subject -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationConfig -AllPartitions -ErrorAction -ErrorVariable -IncludeSimplifiedGmailMigrationData -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -Archive -Async -ErrorAction -ErrorVariable -Filter -Identity -InactiveMailboxOnly -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeEmailAddressDisplayNames -IncludeForwardingAddressWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeInactiveMailbox -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -Properties -PublicFolder -RecipientTypeDetails -ResultSize -SoftDeletedMailbox -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-LimitsEnforcementStatus -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HVEAccountSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailUser -Anr -ErrorAction -ErrorVariable -Filter -HVEAccount -Identity -LOBAppAccount -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SharedWithMailUser -SoftDeletedMailUser -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantScanRequestStatistics -IncludeReport", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedGroup -Anr -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAllProperties -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -IncludeRejectMessagesFromSendersOrMembersWithDisplayNames -IncludeSoftDeletedGroups -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -DomainController -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuotaEligibility -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxMessageConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SignatureName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAnalysisRequestStatistics -CSVData -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeAnalysisResult -IncludeFolderDetails -IncludeMappingResult -IncludeReport -ItemsStartTime -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-MailboxDiagnosticLogs -Archive -ComponentName -Confirm -ErrorAction -ExtendedProperties -Identity -IncludeInactiveMailboxes -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderItemStatistics -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderClientPermission -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionInfo -BlockingScenario -Details -NumberOfDays", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationBatch -DiagnosticInfo -Endpoint -ErrorAction -ErrorVariable -Identity -IncludeReport -LimitErrorsTo -OutBuffer -OutVariable -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnPremServerReportInfo -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SweepRule -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -Provider -ResultSize -SkipCount -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboxRule -BypassScopeCheck -DescriptionTimeFormat -DescriptionTimeZone -ErrorAction -ErrorVariable -Identity -IncludeHidden -Mailbox -OutBuffer -OutVariable -ResultSize -SkipCount -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PendingDelicenseUser -Identity -ResultSize -ShowDueObjectsOnly", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-HistoricalSearch -BlockStatus -CompressFile -ConnectorType -DeliveryStatus -Direction -DLPPolicy -EncryptionTemplate -EncryptionType -EndDate -ErrorAction -ErrorVariable -Locale -MessageID -NetworkMessageID -NotifyAddress -OriginalClientIP -OutBuffer -OutVariable -RecipientAddress -ReportTitle -ReportType -SenderAddress -SmtpSecurityError -StartDate -TLSUsed -TransportRule -Url -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessageHeader -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxRegionalConfiguration -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -VerifyDefaultFolderNameLanguage -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolderPermission -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -SkipCount -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Place -ErrorAction -ErrorVariable -Identity -ResultSize -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -DomainController -Process -SoftDeletedMailbox", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAnalysisRequest -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -SyncProtocol -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalActivityByDomainReport -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarConfiguration -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DetailZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUser -BatchId -EmailAddress -ErrorAction -ErrorVariable -Identity -IncludeAssociatedUsers -MailboxGuid -OutBuffer -OutVariable -ResultSize -Status -StatusSummary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AggregateZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncRequestStatistics -DiagnosticInfo -DiagnosticOnly -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -IncludeSlaReport -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolderStatistics -Archive -Database -DiagnosticInfo -ErrorAction -ErrorVariable -FolderScope -Identity -IncludeAnalysis -IncludeOldestAndNewestItems -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -ResultSize -SkipCount -StoreMailboxIdentity -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MoveRequest -BatchName -ErrorAction -ErrorVariable -Flags -Identity -MoveStatus -Offline -OutBuffer -OutVariable -RemoteHostName -ResultSize -SortBy -Status -Suspend -SuspendWhenReadyToComplete -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxIRMAccess -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoDetailReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoAggregateReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMailboxMigrationRequestStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MoveRequestStatistics -Analysis -DiagnosticInfo -DiagnosticOnly -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReportSeries -AggregateBy -ConnectorIds -Domain -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -GroupByFields -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarViewDiagnostics -BindToResults -CalendarId -Identity -IgnoreCorruptItems -OutBuffer -OutVariable -ReturnSeriesMasters -TimeZonePreference -WarningAction -WarningVariable -WindowEndUtc -WindowStartUtc", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -IsVIP -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Get-Clutter -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Troubleshoot-AgendaMail -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -Identity -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleID -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EventsFromEmailConfiguration -CreateEventsFromEmailAsPrivate -EventReservationProcessingLevel -FlightReservationProcessingLevel -FoodEstablishmentReservationProcessingLevel -Identity -InvoiceProcessingLevel -LodgingReservationProcessingLevel -ParcelDeliveryProcessingLevel -RentalCarReservationProcessingLevel -ResetSettings -ServiceReservationProcessingLevel", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-MessageTrackingReport -BypassDelegateChecking -Confirm -DoNotResolve -ErrorAction -ErrorVariable -Identity -MessageEntryId -MessageId -OutBuffer -OutVariable -Recipients -ResultSize -Sender -Subject -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Reset-EventsFromEmailBlockStatus -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PublicFolderMailboxMigrationRequest -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ExoJob -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Receive-ExoJob -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -SubJobId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedGroupLinks -ErrorAction -ErrorVariable -Identity -LinkType -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPlan -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPIN -Credential -ErrorAction -ErrorVariable -Identity -IgnoreErrors -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallDataRecord -ErrorAction -ErrorVariable -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallAnsweringRule -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatSummary -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatProfileDetails -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProtectionStatusFilter -SenderDomainFilter -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatInstances -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PageSize -ProtectionStatusFilter -SenderDomainFilter -StartPage -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatDetails -Base64FileHash -EndTime -ErrorAction -ErrorVariable -FileHash -OutBuffer -OutVariable -StartTime -ThreatType -UserPrincipalName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignProfile -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignIndustries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignCountries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticle -ArticleURL -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncRequest -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -SyncProtocol -WarningAction -WarningVariable -WhatIf -WorkloadType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SubmissionCategoryReport -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-StaleMailboxReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-StaleMailboxDetailReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofMailReport -Action -Direction -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDeliveryReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -Recipient -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityReport -AggregateBy -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityDetailsReport -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Sender -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScorecardMetricsReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScorecardClientOutlookReport -Category -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScorecardClientOSReport -Category -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScorecardClientDeviceReport -Category -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksDetailReport -Action -AppNameList -Domain -EndDate -Page -PageSize -RecipientAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksAggregateReport -Action -AppNameList -EndDate -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOTenantStorageMetricReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOTeamSiteStorageReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOTeamSiteDeployedReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOSkyDriveProStorageReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOSkyDriveProDeployedReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOOneDriveForBusinessUserStatisticsReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOOneDriveForBusinessFileActivityReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SPOActiveUserReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SCInsights -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportScheduleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSchedule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportExecutionInstance -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -Capabilities -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderStatistics -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMailboxMigrationRequest -BatchName -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -ResultSize -Status -Suspend -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMailboxDiagnostics -Confirm -ErrorAction -ErrorVariable -Identity -IncludeDumpsterInfo -IncludeHierarchyInfo -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolder -ErrorAction -ErrorVariable -GetChildren -Identity -LostAndFound -Mailbox -OutBuffer -OutVariable -Recurse -ResidentFolders -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PartnerCustomerUserReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PartnerClientExpiringSubscriptionReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutboundConnectorReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnlineMeetingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-O365ClientOSReport -EndDate -ErrorAction -ErrorVariable -OS -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-O365ClientOSDetailReport -EndDate -ErrorAction -ErrorVariable -OperatingSystem -OperatingSystemVersion -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable -WindowsLiveID", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-O365ClientBrowserReport -Browser -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-O365ClientBrowserDetailReport -Browser -BrowserVersion -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable -WindowsLiveID", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MxRecordsReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MxRecordReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceStatistics -ActiveSync -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -NotificationEmailAddresses -OutBuffer -OutVariable -OWAforDevices -RestApi -ShowRecoveryPassword -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceDetailsReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceDashboardSummaryReport -DeviceType -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDevice -ActiveSync -ErrorAction -ErrorVariable -Filter -Identity -Mailbox -OrganizationalUnit -OutBuffer -OutVariable -OWAforDevices -RestApi -ResultSize -SortBy -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationUserStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -LimitSkippedItemsTo -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MigrationEndpoint -Confirm -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrackingReport -BypassDelegateChecking -DoNotResolve -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientPathFilter -Recipients -ReportTemplate -ResultSize -Status -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetail -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrace -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -Status -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxUsageReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxUsageDetailReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxStatistics -Archive -ErrorAction -ErrorVariable -Identity -IncludeMoveHistory -IncludeMoveReport -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxSpellingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPlan -AllMailboxPlanReleases -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxOverrideConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxLocation -Debug -ErrorAction -ErrorVariable -Identity -MailboxLocationType -OutBuffer -OutVariable -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxJunkEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarFolder -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAutoReplyConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxActivityReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficTopReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficSummaryReport -Category -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficPolicyReport -Action -AggregateBy -Direction -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFlowStatusReport -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFilterListReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -SelectionTarget -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailTransportRuleReport -Action -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEvaluationModeReport -ConnectorId -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailATPReport -DataSource -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -IsV2Report -MalwareName -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailContact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-LogonStatistics -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-LinkedUser -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-LicenseVsUsageSummaryReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportSummary -Action -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportDetails -Action -AggregateBy -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-GroupActivityReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Group -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-FfoMigrationReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalActivitySummaryReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalActivityReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExternalActivityByUserReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoJob -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Recursive -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EventsFromEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReport -AggregateBy -ConnectorId -Direction -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSiDetectionsReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -SensitiveType -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpIncidentDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetectionsReport -Action -AggregateBy -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -SummarizeBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -Credential -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -Async -Credential -ErrorAction -ErrorVariable -Filter -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -Properties -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceComplianceUserReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceComplianceUserInventory -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceComplianceSummaryReport -DeviceCompliancePolicy -DeviceComplianceStatus -DevicePlatform -DeviceUserName -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceComplianceReportDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceCompliancePolicyInventory -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceComplianceDetailsReportFilter -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DeviceComplianceDetailsReport -DeviceCompliancePolicy -DeviceComplianceStatus -DevicePlatform -DeviceUserName -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsUsersBlockedReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsUserActivitiesReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsPSTNUsageDetailReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsPSTNConferenceTimeReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsP2PSessionReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsP2PAVTimeReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsConferenceReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsClientDeviceReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsClientDeviceDetailReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ResultSize -StartDate -UserName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsActiveUserReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CsAVConferenceTimeReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Contact -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConnectionByClientTypeReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConnectionByClientTypeDetailReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ReportType -ResultSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserDetailReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserAggregateReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarProcessing -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarDiagnosticLog -EndDate -EntryId -ExactMatch -Identity -ItemClass -ItemIds -Latest -LogLocation -MeetingId -OutBuffer -OutVariable -ResultSize -StartDate -Subject -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarDiagnosticAnalysis -CalendarLogs -DetailLevel -ErrorAction -GlobalObjectId -LogLocation -OutputAs -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailboxPlan -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -ActiveSyncDebugLogging -ActiveSyncSuppressReadReceipt -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OrganizationalUnit -OutBuffer -OutVariable -ProtocolSettings -ReadIsOptimizedForAccessibility -RecalculateHasActiveSyncDevicePartnership -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionTrafficReport -Action -AggregateBy -Direction -DisplayBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MalwareName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentReport -Action -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentDetail -Action -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AddressBookPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceStatistics -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -NotificationEmailAddresses -OutBuffer -OutVariable -ShowRecoveryPassword -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDevice -ErrorAction -ErrorVariable -Filter -Identity -Mailbox -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPTotalTrafficReport -Action -AggregateBy -Direction -Domain -DurationDays -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/7150d34d-3ddb-4bb5-b71c-a2cb2a43dfd9.json b/RoleDefinitions/7150d34d-3ddb-4bb5-b71c-a2cb2a43dfd9.json new file mode 100644 index 000000000..550dd58e9 --- /dev/null +++ b/RoleDefinitions/7150d34d-3ddb-4bb5-b71c-a2cb2a43dfd9.json @@ -0,0 +1,32 @@ +{ + "id": "7150d34d-3ddb-4bb5-b71c-a2cb2a43dfd9", + "description": "This role enables administrators to manage organization-wide transport settings, such as system messages, site configuration, and other organization-wide transport settings.\r\nThis role doesn't enable you to create or manage transport Receive or Send connectors, queues, hygiene, agents, remote and accepted domains, or rules. To create or manage each of the transport features, you must be assigned roles associated with the following role types:\r\nReceiveConnectors\r\nSendConnectors\r\nTransportQueues\r\nTransportHygiene\r\nTransportAgents\r\nRemoteandAcceptedDomains\r\nTransportRules", + "displayName": "Organization Transport Settings", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantMailFromAddress -ApplicationId -FromAddress -OrganizationId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TransportConfig -AddressBookPolicyRoutingEnabled -AllowLegacyTLSClients -ClearCategories -Confirm -ConvertDisclaimerWrapperToEml -DSNConversionMode -ErrorAction -ErrorVariable -ExternalDelayDsnEnabled -ExternalDsnDefaultLanguage -ExternalDsnLanguageDetectionEnabled -ExternalDsnReportingAuthority -ExternalDsnSendHtml -ExternalPostmasterAddress -Force -HeaderPromotionModeSetting -InternalDelayDsnEnabled -InternalDsnDefaultLanguage -InternalDsnLanguageDetectionEnabled -InternalDsnReportingAuthority -InternalDsnSendHtml -JournalingReportNdrTo -JournalMessageExpirationDays -MaxRecipientEnvelopeLimit -MessageExpiration -OutBuffer -OutVariable -PreventDuplicateJournalingEnabled -ReplyAllStormBlockDurationHours -ReplyAllStormDetectionMinimumRecipients -ReplyAllStormDetectionMinimumReplies -ReplyAllStormProtectionEnabled -Rfc2231EncodingEnabled -SmtpClientAuthenticationDisabled -VoicemailJournalingEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuotaEligibility -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-OAuthConnectivity -AppOnly -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Mailbox -OutBuffer -OutVariable -ReloadConfig -Service -TargetUri -UseCachedToken -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HybridMailflow -CentralizedTransportEnabled -CertificateSubject -Confirm -ErrorAction -ErrorVariable -InboundIPs -OnPremisesFQDN -OutboundDomains -OutBuffer -OutVariable -SecureMailEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationRelationship -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConfiguration -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HybridMailflowDatacenterIPs -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HybridMailflow -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/77781d80-cf4e-461a-9383-2ad709d7b83c.json b/RoleDefinitions/77781d80-cf4e-461a-9383-2ad709d7b83c.json new file mode 100644 index 000000000..9461ce72f --- /dev/null +++ b/RoleDefinitions/77781d80-cf4e-461a-9383-2ad709d7b83c.json @@ -0,0 +1,49 @@ +{ + "id": "77781d80-cf4e-461a-9383-2ad709d7b83c", + "description": "This role allows partner applications to search mailboxes.", + "displayName": "MailboxSearchApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "UpgradeDistributionGroup", + "UpdateGroupMailbox", + "StartSearchSession", + "SetShardRelevancyData", + "SearchMailboxes", + "PostGroupItem", + "PerformInstantSearch", + "GetWacAttachmentInfo", + "GetUserUnifiedGroup", + "GetUnifiedGroupUnseenCount", + "GetShardRelevancyScore", + "GetShardRelevancyData", + "GetSearchableMailboxes", + "GetSearchSuggestions", + "GetSearchResults", + "GetNonIndexableItemStatistics", + "GetNonIndexableItemDetails", + "GetItem", + "GetFolder", + "GetFileItems", + "GetFileAttachment", + "GetDiscoverySearchConfiguration", + "GetAttachmentThumbnail", + "GetAttachment", + "GetAllAttachmentsAsZip", + "FindFolder", + "ExportItems", + "ExecuteSearch", + "EndSearchSession", + "EndInstantSearchSession", + "DeleteSearchSuggestion" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/810a2642-a034-447f-a5e8-41beaa378541.json b/RoleDefinitions/810a2642-a034-447f-a5e8-41beaa378541.json index 6d3dff4a5..9cf2f4e1f 100644 --- a/RoleDefinitions/810a2642-a034-447f-a5e8-41beaa378541.json +++ b/RoleDefinitions/810a2642-a034-447f-a5e8-41beaa378541.json @@ -17,6 +17,7 @@ { "allowedResourceActions": [ "microsoft.directory/groups/hiddenMembers/read", + "microsoft.directory/groups.unified/assignedLabels/update", "microsoft.directory/groups.unified/basic/update", "microsoft.directory/groups.unified/create", "microsoft.directory/groups.unified/delete", diff --git a/RoleDefinitions/88322fe2-543a-4966-98e3-6e415a033974.json b/RoleDefinitions/88322fe2-543a-4966-98e3-6e415a033974.json new file mode 100644 index 000000000..849db2f0b --- /dev/null +++ b/RoleDefinitions/88322fe2-543a-4966-98e3-6e415a033974.json @@ -0,0 +1,106 @@ +{ + "id": "88322fe2-543a-4966-98e3-6e415a033974", + "description": "This role enables administrators to view the Outlook Web App options of a user in an organization. This role can be used to help diagnose configuration problems.", + "displayName": "User Options", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-InboxRule -AlwaysDeleteOutlookRulesBlob -ApplyCategory -ApplySystemCategory -BodyContainsWords -Confirm -DeleteMessage -DeleteSystemCategory -DisplayAlert -ErrorAction -ErrorVariable -ExceptIfBodyContainsWords -ExceptIfFlaggedForAction -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfHasAttachment -ExceptIfHasClassification -ExceptIfHeaderContainsWords -ExceptIfMessageTypeMatches -ExceptIfMyNameInCcBox -ExceptIfMyNameInToBox -ExceptIfMyNameInToOrCcBox -ExceptIfMyNameNotInToBox -ExceptIfReceivedAfterDate -ExceptIfReceivedBeforeDate -ExceptIfRecipientAddressContainsWords -ExceptIfSentOnlyToMe -ExceptIfSentTo -ExceptIfSubjectContainsWords -ExceptIfSubjectOrBodyContainsWords -ExceptIfWithImportance -ExceptIfWithinSizeRangeMaximum -ExceptIfWithinSizeRangeMinimum -ExceptIfWithSensitivity -FlaggedForAction -Force -ForwardAsAttachmentTo -ForwardTo -From -FromAddressContainsWords -HasAttachment -HasClassification -HeaderContainsWords -Identity -Mailbox -MarkAsRead -MarkImportance -MessageTypeMatches -MyNameInCcBox -MyNameInToBox -MyNameInToOrCcBox -MyNameNotInToBox -Name -OutBuffer -OutVariable -PinMessage -Priority -ReceivedAfterDate -ReceivedBeforeDate -RecipientAddressContainsWords -RedirectTo -SentOnlyToMe -SentTo -SoftDeleteMessage -StopProcessingRules -SubjectContainsWords -SubjectOrBodyContainsWords -WarningAction -WarningVariable -WhatIf -WithImportance -WithinSizeRangeMaximum -WithinSizeRangeMinimum -WithSensitivity", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-InboxRule -AlwaysDeleteOutlookRulesBlob -ApplyCategory -ApplySystemCategory -BodyContainsWords -Confirm -DeleteMessage -DeleteSystemCategory -DisplayAlert -ErrorAction -ErrorVariable -ExceptIfBodyContainsWords -ExceptIfFlaggedForAction -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfHasAttachment -ExceptIfHasClassification -ExceptIfHeaderContainsWords -ExceptIfMessageTypeMatches -ExceptIfMyNameInCcBox -ExceptIfMyNameInToBox -ExceptIfMyNameInToOrCcBox -ExceptIfMyNameNotInToBox -ExceptIfReceivedAfterDate -ExceptIfReceivedBeforeDate -ExceptIfRecipientAddressContainsWords -ExceptIfSentOnlyToMe -ExceptIfSentTo -ExceptIfSubjectContainsWords -ExceptIfSubjectOrBodyContainsWords -ExceptIfWithImportance -ExceptIfWithinSizeRangeMaximum -ExceptIfWithinSizeRangeMinimum -ExceptIfWithSensitivity -FlaggedForAction -Force -ForwardAsAttachmentTo -ForwardTo -From -FromAddressContainsWords -FromMessageId -HasAttachment -HasClassification -HeaderContainsWords -Mailbox -MarkAsRead -MarkImportance -MessageTypeMatches -MyNameInCcBox -MyNameInToBox -MyNameInToOrCcBox -MyNameNotInToBox -Name -OutBuffer -OutVariable -PinMessage -Priority -ReceivedAfterDate -ReceivedBeforeDate -RecipientAddressContainsWords -RedirectTo -SentOnlyToMe -SentTo -SoftDeleteMessage -StopProcessingRules -SubjectContainsWords -SubjectOrBodyContainsWords -ValidateOnly -WarningAction -WarningVariable -WhatIf -WithImportance -WithinSizeRangeMaximum -WithinSizeRangeMinimum -WithSensitivity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxCalendarConfiguration -AgendaMailEnabled -AgendaMailIntroductionEnabled -AgendaPaneEnabled -AutoDeclineWhenBusy -CalendarFeedsPreferredLanguage -CalendarFeedsPreferredRegion -CalendarFeedsRootPageId -Confirm -ConversationalSchedulingEnabled -CreateEventsFromEmailAsPrivate -DailyAgendaMailSchedule -DefaultMeetingDuration -DefaultMinutesToReduceLongEventsBy -DefaultMinutesToReduceShortEventsBy -DefaultOnlineMeetingProvider -DefaultReminderTime -DeleteMeetingRequestOnRespond -DiningEventsFromEmailEnabled -EntertainmentEventsFromEmailEnabled -ErrorAction -ErrorVariable -EventsFromEmailEnabled -FirstWeekOfYear -FlightEventsFromEmailEnabled -HotelEventsFromEmailEnabled -Identity -InvoiceEventsFromEmailEnabled -LocalEventsEnabled -LocalEventsLocation -LocationDetailsInFreeBusy -MailboxLocation -OnlineMeetingsByDefaultEnabled -OutBuffer -OutVariable -PackageDeliveryEventsFromEmailEnabled -PreserveDeclinedMeetings -RemindersEnabled -ReminderSoundEnabled -RentalCarEventsFromEmailEnabled -ServiceAppointmentEventsFromEmailEnabled -ShortenEventScopeDefault -ShowWeekNumbers -SkipAgendaMailOnFreeDays -TimeIncrement -UseBrightCalendarColorThemeInOwa -WarningAction -WarningVariable -WeatherEnabled -WeatherLocationBookmark -WeatherLocations -WeatherUnit -WeekStartDay -WhatIf -WorkDays -WorkingHoursEndTime -WorkingHoursStartTime -WorkingHoursTimeZone -WorkspaceUserEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxJunkEmailConfiguration -BlockedSendersAndDomains -Confirm -ContactsTrusted -Enabled -ErrorAction -ErrorVariable -FailOnError -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -SenderScreeningEnabled -TrustedListsOnly -TrustedRecipientsAndDomains -TrustedSendersAndDomains -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxMessageConfiguration -AfterMoveOrDeleteBehavior -AlwaysShowBcc -AlwaysShowFrom -AutoAddSignature -AutoAddSignatureOnMobile -AutoAddSignatureOnReply -CheckForForgottenAttachments -CheckForReportJunkDialog -Confirm -ConversationSortOrder -DefaultFontColor -DefaultFontFlags -DefaultFontName -DefaultFontSize -DefaultFormat -DefaultSignature -DefaultSignatureOnReply -DeleteSignatureName -DisplayDensityMode -EchoGroupMessageBackToSubscribedSender -EmailComposeMode -EmptyDeletedItemsOnLogoff -ErrorAction -ErrorVariable -FavoriteNodes -FavoritesBitFlags -FrequentlyUsedFolders -GlobalReadingPanePosition -HideDeletedItems -Identity -IgnoreDefaultScope -InboxPlusTabs -InboxPlusWatermarks -IsDarkModeTheme -IsFavoritesFolderTreeCollapsed -IsFocusedInboxEnabled -IsFocusedInboxOnAdminLastUpdateTime -IsFocusedInboxOnLastUpdateTime -IsMailRootFolderTreeCollapsed -IsReplyAllTheDefaultResponse -LinkPreviewEnabled -MailFolderPaneExpanded -MailSendUndoInterval -ManuallyPickCertificate -MruEmojis -NavigationBarWidth -NavigationPaneViewOption -NewEnabledPonts -NewItemNotification -OutBuffer -OutVariable -PreferAccessibleContent -PreviewMarkAsReadBehavior -PreviewMarkAsReadDelaytime -ReadReceiptResponse -ReportJunkSelected -SendAddressDefault -SendAsMruAddresses -ShowConversationAsTree -ShowInlinePreviews -ShowNotificationBar -ShowPreviewTextInListView -ShowReadingPaneOnFirstLoad -ShowSenderOnTopInListView -ShowUpNext -SignatureHtml -SignatureHtmlBody -SignatureName -SignatureText -SignatureTextOnMobile -SigningCertificateId -SigningCertificateSubject -SmimeEncrypt -SmimeSign -UseDefaultSignatureOnMobile -WarningAction -WarningVariable -WebSuggestedRepliesEnabledForUser -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxMessageConfiguration -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -SignatureName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-App -AppType -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -MailboxName -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SweepRule -Confirm -Enabled -ErrorAction -ErrorVariable -KeepForDays -KeepLatest -Mailbox -Name -OutBuffer -OutVariable -Provider -Sender -SystemCategory -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SweepRule -Confirm -Enabled -ErrorAction -ErrorVariable -Identity -KeepForDays -KeepLatest -Mailbox -Name -OutBuffer -OutVariable -Provider -Sender -SystemCategory -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-BookingMailboxPermission -Identity -Permission -StaffMember", + "(Microsoft.Exchange.Management.PowerShell.E2010) Debug-AdditionalCapacityProtection -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CalendarProcessing -AddAdditionalResponse -AdditionalResponse -AddNewRequestsTentatively -AddOrganizerToSubject -AllBookInPolicy -AllowConflicts -AllowRecurringMeetings -AllRequestInPolicy -AllRequestOutOfPolicy -AutomateProcessing -BookingType -BookingWindowInDays -BookInPolicy -Confirm -ConflictPercentageAllowed -DeleteAttachments -DeleteComments -DeleteNonCalendarItems -DeleteSubject -EnableAutoRelease -EnableResponseDetails -EnforceCapacity -EnforceSchedulingHorizon -ErrorAction -ErrorVariable -ForwardRequestsToDelegates -Identity -IgnoreDefaultScope -MaximumConflictInstances -MaximumDurationInMinutes -MinimumDurationInMinutes -OrganizerInfo -OutBuffer -OutVariable -PostReservationMaxClaimTimeInMinutes -ProcessExternalMeetingMessages -RemoveCanceledMeetings -RemoveForwardedMeetingNotifications -RemoveOldMeetingMessages -RemovePrivateProperty -RequestInPolicy -RequestOutOfPolicy -ResourceDelegates -ScheduleOnlyDuringWorkHours -TentativePendingApproval -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxRegionalConfiguration -Archive -Confirm -DateFormat -ErrorAction -ErrorVariable -Identity -Language -LocalizeDefaultFolderName -MailboxLocation -OutBuffer -OutVariable -TimeFormat -TimeZone -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxRegionalConfiguration -Archive -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -VerifyDefaultFolderNameLanguage -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BookingMailbox -AccessingUser -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarConfiguration -ErrorAction -ErrorVariable -Identity -MailboxLocation -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -AcceptMessagesOnlyFrom -AcceptMessagesOnlyFromDLMembers -AcceptMessagesOnlyFromSendersOrMembers -DeliverToMailboxAndForward -DisplayName -ErrorAction -ErrorVariable -ExternalOofOptions -ForwardingAddress -ForwardingSmtpAddress -GrantSendOnBehalfTo -Identity -Languages -MailTip -MailTipTranslations -MessageCopyForSendOnBehalfEnabled -MessageCopyForSentAsEnabled -MessageCopyForSMTPClientSubmissionEnabled -OutBuffer -OutVariable -RejectMessagesFrom -RejectMessagesFromDLMembers -RejectMessagesFromSendersOrMembers -RequireSenderAuthenticationEnabled -RoomMailboxPassword -SimpleDisplayName -UserCertificate -UserSMimeCertificate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboxRule -BypassScopeCheck -DescriptionTimeFormat -DescriptionTimeZone -ErrorAction -ErrorVariable -Identity -IncludeHidden -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Set-Clutter -CleanUpClutter -Enable -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Get-Clutter -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-UMPhoneSession -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-UMPhoneSession -AwayVoicemailGreeting -CallAnsweringRuleId -Confirm -DefaultVoicemailGreeting -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PhoneNumber -UMMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -City -CountryOrRegion -DisplayName -ErrorAction -ErrorVariable -Fax -FirstName -GeoCoordinates -HomePhone -Identity -Initials -LastName -MobilePhone -Notes -Office -OutBuffer -OutVariable -Pager -Phone -PostalCode -PostOfficeBox -PublicFolder -SimpleDisplayName -StateOrProvince -StreetAddress -WarningAction -WarningVariable -WebPage", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailboxPIN -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Pin -PinExpired -SendEmail -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMMailboxConfiguration -Confirm -DefaultPlayOnPhoneNumber -ErrorAction -ErrorVariable -FolderToReadEmailsFrom -Greeting -Identity -OutBuffer -OutVariable -ReadOldestUnreadVoiceMessagesFirst -ReceivedVoiceMailPreviewEnabled -SentVoiceMailPreviewEnabled -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UMCallAnsweringRule -CallerIds -CallersCanInterruptGreeting -CheckAutomaticReplies -Confirm -ErrorAction -ErrorVariable -ExtensionsDialed -Identity -KeyMappings -Mailbox -Name -OutBuffer -OutVariable -Priority -ScheduleStatus -TimeOfDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxSpellingConfiguration -CheckBeforeSend -Confirm -DictionaryLanguage -ErrorAction -ErrorVariable -Identity -IgnoreMixedDigits -IgnoreUppercase -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxCalendarFolder -Confirm -DetailLevel -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -PublishDateRangeFrom -PublishDateRangeTo -PublishEnabled -ResetUrl -SearchableUrlEnabled -SetAsSharingSource -SharedCalendarSyncStartDate -UseHttps -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxAutoReplyConfiguration -AutoDeclineFutureRequestsWhenOOF -AutoReplyState -Confirm -CreateOOFEvent -DeclineAllEventsForScheduledOOF -DeclineEventsForScheduledOOF -DeclineMeetingMessage -EndTime -ErrorAction -ErrorVariable -EventsToDeleteIDs -ExternalAudience -ExternalMessage -Identity -IgnoreDefaultScope -InternalMessage -OOFEventSubject -OutBuffer -OutVariable -Recipients -ReminderMessage -ReminderMinutesBeforeStart -StartTime -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -ErrorAction -ErrorVariable -Identity -MailTip -MailTipTranslations -OutBuffer -OutVariable -UserCertificate -UserSMimeCertificate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EventsFromEmailConfiguration -CreateEventsFromEmailAsPrivate -ErrorAction -ErrorVariable -EventReservationProcessingLevel -FlightReservationProcessingLevel -FoodEstablishmentReservationProcessingLevel -Identity -InvoiceProcessingLevel -LodgingReservationProcessingLevel -OutBuffer -OutVariable -ParcelDeliveryProcessingLevel -RentalCarReservationProcessingLevel -ResetSettings -ServiceReservationProcessingLevel -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-CASMailbox -ActiveSyncDebugLogging -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Reset-EventsFromEmailBlockStatus -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MobileDevice -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxUserConfiguration -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ActiveSyncDevice -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-UMCallAnsweringRule -CallerIds -CallersCanInterruptGreeting -CheckAutomaticReplies -Confirm -ErrorAction -ErrorVariable -ExtensionsDialed -KeyMappings -Mailbox -Name -OutBuffer -OutVariable -Priority -ScheduleStatus -TimeOfDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailMessage -Body -BodyFormat -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Subject -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -AllowReadWriteMailbox -Confirm -DownloadOnly -Enabled -ErrorAction -ErrorVariable -Etoken -FileData -FileStream -Mailbox -MarketplaceAssetID -MarketplaceCorrelationID -MarketplaceQueryMarket -MarketplaceServicesUrl -MarketplaceUserProfileType -OutBuffer -OutVariable -Url -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-RecipientDataProperty -Confirm -ErrorAction -ErrorVariable -FileData -Identity -OutBuffer -OutVariable -Picture -SpokenName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMPhoneSession -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallAnsweringRule -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TextMessagingAccount -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SweepRule -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -Provider -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnlineMeetingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDeviceStatistics -ActiveSync -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -NotificationEmailAddresses -OutBuffer -OutVariable -OWAforDevices -RestApi -ShowRecoveryPassword -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MobileDevice -ActiveSync -ErrorAction -ErrorVariable -Filter -Identity -Mailbox -OrganizationalUnit -OutBuffer -OutVariable -OWAforDevices -RestApi -ResultSize -SortBy -UniversalOutlook -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -ErrorAction -ErrorVariable -Identity -IncludeLocales -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageCategory -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxStatistics -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxSpellingConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxJunkEmailConfiguration -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxCalendarFolder -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAutoReplyConfiguration -Credential -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ReadFromDomainController -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EventsFromEmailConfiguration -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CalendarProcessing -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CASMailbox -ActiveSyncDebugLogging -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProtocolSettings -ReadIsOptimizedForAccessibility -RecalculateHasActiveSyncDevicePartnership -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-App -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDeviceStatistics -ErrorAction -ErrorVariable -GetMailboxLog -Identity -Mailbox -NotificationEmailAddresses -OutBuffer -OutVariable -ShowRecoveryPassword -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ActiveSyncDevice -ErrorAction -ErrorVariable -Filter -Identity -Mailbox -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-App -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-UMCallAnsweringRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SweepRule -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-InboxRule -AlwaysDeleteOutlookRulesBlob -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-App -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-MobileDevice -AccountOnly -Cancel -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmailAddresses -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Clear-ActiveSyncDevice -Cancel -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmailAddresses -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/9360feb5-f418-4baa-8175-e2a00bac4301.json b/RoleDefinitions/9360feb5-f418-4baa-8175-e2a00bac4301.json index 34f9c57a3..8fa716adf 100644 --- a/RoleDefinitions/9360feb5-f418-4baa-8175-e2a00bac4301.json +++ b/RoleDefinitions/9360feb5-f418-4baa-8175-e2a00bac4301.json @@ -18,6 +18,7 @@ "allowedResourceActions": [ "microsoft.directory/applications/extensionProperties/update", "microsoft.directory/contacts/create", + "microsoft.directory/groups/assignedLabels/update", "microsoft.directory/groups/assignLicense", "microsoft.directory/groups/basic/update", "microsoft.directory/groups/classification/update", diff --git a/RoleDefinitions/9553af24-bd83-4ac3-a339-0e58f9e5478e.json b/RoleDefinitions/9553af24-bd83-4ac3-a339-0e58f9e5478e.json new file mode 100644 index 000000000..03b518676 --- /dev/null +++ b/RoleDefinitions/9553af24-bd83-4ac3-a339-0e58f9e5478e.json @@ -0,0 +1,24 @@ +{ + "id": "9553af24-bd83-4ac3-a339-0e58f9e5478e", + "displayName": "Endpoint Privilege Reader", + "description": "Endpoint Privilege Readers can view Endpoint Privilege Management (EPM) policies in the Intune console.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "9553af24-bd83-4ac3-a339-0e58f9e5478e", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/EpmPolicy/Read", + "Microsoft.Intune/EpmPolicy/ViewReports", + "Microsoft.Intune/EpmPolicy/ViewElevationRequests", + "Microsoft.Intune/ManagedDevices/Read" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/95ae7035-fd8a-489b-b374-9114bae9de41.json b/RoleDefinitions/95ae7035-fd8a-489b-b374-9114bae9de41.json new file mode 100644 index 000000000..e3e512ba5 --- /dev/null +++ b/RoleDefinitions/95ae7035-fd8a-489b-b374-9114bae9de41.json @@ -0,0 +1,24 @@ +{ + "id": "95ae7035-fd8a-489b-b374-9114bae9de41", + "description": "This role will allow users to view and modify their org custom apps.", + "displayName": "Org Custom Apps", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -AddInOverrides -AllowReadWriteMailbox -AllowSetting -AppState -AppType -Confirm -DefaultStateForUser -Enabled -ErrorAction -ErrorVariable -FileData -FileStream -Identity -OrganizationApp -OutBuffer -OutVariable -Predecessors -PrivateCatalog -ProvidedTo -UpdateAppState -Url -UserList -Version -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-App -AppType -Confirm -ErrorAction -ErrorVariable -Identity -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-App -Confirm -DefaultStateForUser -Enabled -ErrorAction -ErrorVariable -Force -Identity -Name -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -ProvidedTo -UserList -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-App -ErrorAction -ErrorVariable -Identity -OrganizationApp -OutBuffer -OutVariable -PrivateCatalog -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-App -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-App -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/96ed3a9b-8762-47bc-ac38-326bc152ed6d.json b/RoleDefinitions/96ed3a9b-8762-47bc-ac38-326bc152ed6d.json new file mode 100644 index 000000000..7d3b70e78 --- /dev/null +++ b/RoleDefinitions/96ed3a9b-8762-47bc-ac38-326bc152ed6d.json @@ -0,0 +1,20 @@ +{ + "id": "96ed3a9b-8762-47bc-ac38-326bc152ed6d", + "description": null, + "displayName": "Privacy Management Investigation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDomainGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/987068de-5a1b-4b67-bfb3-4753efc4e410.json b/RoleDefinitions/987068de-5a1b-4b67-bfb3-4753efc4e410.json new file mode 100644 index 000000000..2cb5f9884 --- /dev/null +++ b/RoleDefinitions/987068de-5a1b-4b67-bfb3-4753efc4e410.json @@ -0,0 +1,19 @@ +{ + "id": "987068de-5a1b-4b67-bfb3-4753efc4e410", + "description": "Allows the app to use Exchange Web Services with full access to all mailboxes", + "displayName": "Application EWS.AccessAsApp", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "EWS.AccessAsApp" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/9e0cc482-82df-4ab2-a24c-0c23a3f52e1e.json b/RoleDefinitions/9e0cc482-82df-4ab2-a24c-0c23a3f52e1e.json new file mode 100644 index 000000000..41bd68c62 --- /dev/null +++ b/RoleDefinitions/9e0cc482-82df-4ab2-a24c-0c23a3f52e1e.json @@ -0,0 +1,107 @@ +{ + "id": "9e0cc482-82df-4ab2-a24c-0c23a3f52e1e", + "displayName": "Help Desk Operator", + "description": "Help Desk Operators perform remote tasks on users and devices and can assign applications or policies to users or devices.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "9e0cc482-82df-4ab2-a24c-0c23a3f52e1e", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/MobileApps/Read", + "Microsoft.Intune/MobileApps/Assign", + "Microsoft.Intune/ManagedApps/Read", + "Microsoft.Intune/ManagedApps/Assign", + "Microsoft.Intune/ManagedApps/Wipe", + "Microsoft.Intune/ManagedDevices/Read", + "Microsoft.Intune/ManagedDevices/Update", + "Microsoft.Intune/ManagedDevices/SetPrimaryUser", + "Microsoft.Intune/ManagedDevices/ViewReports", + "Microsoft.Intune/RemoteTasks/Wipe", + "Microsoft.Intune/RemoteTasks/Retire", + "Microsoft.Intune/RemoteTasks/RemoteLock", + "Microsoft.Intune/RemoteTasks/ResetPasscode", + "Microsoft.Intune/RemoteTasks/EnableLostMode", + "Microsoft.Intune/RemoteTasks/DisableLostMode", + "Microsoft.Intune/RemoteTasks/LocateDevice", + "Microsoft.Intune/RemoteTasks/PlayLostModeSound", + "Microsoft.Intune/RemoteTasks/SetDeviceName", + "Microsoft.Intune/RemoteTasks/RebootNow", + "Microsoft.Intune/RemoteTasks/ShutDown", + "Microsoft.Intune/RemoteTasks/RequestRemoteAssistance", + "Microsoft.Intune/RemoteTasks/EnableWindowsIntuneAgent", + "Microsoft.Intune/RemoteTasks/CleanPC", + "Microsoft.Intune/RemoteTasks/ManageSharedDeviceUsers", + "Microsoft.Intune/RemoteTasks/SyncDevice", + "Microsoft.Intune/RemoteTasks/WindowsDefender", + "Microsoft.Intune/RemoteTasks/RotateBitLockerKeys", + "Microsoft.Intune/RemoteTasks/UpdateDeviceAccount", + "Microsoft.Intune/RemoteTasks/RevokeAppleVppLicenses", + "Microsoft.Intune/RemoteTasks/CustomNotification", + "Microsoft.Intune/RemoteTasks/ActivateDeviceEsim", + "Microsoft.Intune/RemoteTasks/InitiateMDMKeyRecovery", + "Microsoft.Intune/RemoteTasks/InitiateDeviceAttestation", + "Microsoft.Intune/RemoteTasks/OnDemandProactiveRemediation", + "Microsoft.Intune/RemoteTasks/ChangeAssignments", + "Microsoft.Intune/DeviceConfigurations/Read", + "Microsoft.Intune/DeviceConfigurations/ViewReports", + "Microsoft.Intune/DeviceCompliancePolices/Read", + "Microsoft.Intune/DeviceCompliancePolices/ViewReports", + "Microsoft.Intune/TelecomExpenses/Read", + "Microsoft.Intune/RemoteAssistance/Read", + "Microsoft.Intune/RemoteAssistanceApp/ViewScreen", + "Microsoft.Intune/RemoteAssistanceApp/TakeFullControl", + "Microsoft.Intune/RemoteAssistanceApp/Elevation", + "Microsoft.Intune/RemoteAssistanceApp/Unattended", + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/EndpointProtection/Read", + "Microsoft.Intune/EnrollmentProgramToken/Read", + "Microsoft.Intune/AppleEnrollmentProfiles/Read", + "Microsoft.Intune/AppleDeviceSerialNumbers/Read", + "Microsoft.Intune/DeviceEnrollmentManagers/Read", + "Microsoft.Intune/CorporateDeviceIdentifiers/Read", + "Microsoft.Intune/TermsAndConditions/Read", + "Microsoft.Intune/Roles/Read", + "Microsoft.Intune/AndroidSync/Read", + "Microsoft.Intune/Audit/Read", + "Microsoft.Intune/RemoteTasks/GetFileVaultKey", + "Microsoft.Intune/RemoteTasks/RotateFileVaultKey", + "Microsoft.Intune/SecurityBaselines/Read", + "Microsoft.Intune/ASRPolicy/Read", + "Microsoft.Intune/EDRPolicy/Read", + "Microsoft.Intune/AppControlPolicy/Read", + "Microsoft.Intune/PolicySets/Read", + "Microsoft.Intune/RemoteTasks/ConfigurationManagerAction", + "Microsoft.Intune/RemoteTasks/DeviceLogs", + "Microsoft.Intune/AssignmentFilter/Read", + "Microsoft.Intune/EndpointAnalytics/Read", + "Microsoft.Intune/MicrosoftDefenderATP/Read", + "Microsoft.Intune/MicrosoftStoreForBusiness/Read", + "Microsoft.Intune/WindowsEnterpriseCertificate/Read", + "Microsoft.Intune/PartnerDeviceManagement/Read", + "Microsoft.Intune/MobileThreatDefense/Read", + "Microsoft.Intune/CertificateConnector/Read", + "Microsoft.Intune/DerivedCredentials/Read", + "Microsoft.Intune/Customization/Read", + "Microsoft.Intune/AndroidFota/Read", + "Microsoft.Intune/CloudAttach/ResourceExplorer", + "Microsoft.Intune/CloudAttach/ClientDetails", + "Microsoft.Intune/CloudAttach/Timeline", + "Microsoft.Intune/CloudAttach/Collections", + "Microsoft.Intune/CloudAttach/Applications", + "Microsoft.Intune/CloudAttach/ApplicationActions", + "Microsoft.Intune/CloudAttach/CMPivot", + "Microsoft.Intune/CloudAttach/Scripts", + "Microsoft.Intune/CloudAttach/ScriptActions", + "Microsoft.Intune/CloudAttach/SoftwareUpdates", + "Microsoft.Intune/CloudAttach/EnrollNow", + "Microsoft.Intune/ServiceNow/ViewIncidents" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/9f8f0a90-9689-4cfc-afe1-65e819e1f788.json b/RoleDefinitions/9f8f0a90-9689-4cfc-afe1-65e819e1f788.json new file mode 100644 index 000000000..255d40591 --- /dev/null +++ b/RoleDefinitions/9f8f0a90-9689-4cfc-afe1-65e819e1f788.json @@ -0,0 +1,32 @@ +{ + "id": "9f8f0a90-9689-4cfc-afe1-65e819e1f788", + "description": null, + "displayName": "Unified Messaging", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxPlan -AllMailboxPlanReleases -ErrorAction -Filter -OutBuffer -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPlan -Credential -ErrorAction -ErrorVariable -Filter -Identity -IgnoreDefaultScope -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailboxPIN -Credential -ErrorAction -ErrorVariable -Identity -IgnoreErrors -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMMailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMIPGateway -ErrorAction -ErrorVariable -Identity -IncludeSimulator -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMHuntGroup -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMDialPlan -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallSummaryReport -ErrorAction -ErrorVariable -GroupBy -OutBuffer -OutVariable -UMDialPlan -UMIPGateway -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMCallDataRecord -ErrorAction -ErrorVariable -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMAutoAttendant -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-UMCallDataRecord -ClientStream -Confirm -Date -ErrorAction -ErrorVariable -OutBuffer -OutVariable -UMDialPlan -UMIPGateway -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/a0b1b346-4d3e-4e8b-98f8-753987be4970.json b/RoleDefinitions/a0b1b346-4d3e-4e8b-98f8-753987be4970.json index 183ad687c..b35285432 100644 --- a/RoleDefinitions/a0b1b346-4d3e-4e8b-98f8-753987be4970.json +++ b/RoleDefinitions/a0b1b346-4d3e-4e8b-98f8-753987be4970.json @@ -107,6 +107,7 @@ "microsoft.directory/groupsAssignableToRoles/delete", "microsoft.directory/groupsAssignableToRoles/reprocessLicenseAssignment", "microsoft.directory/groupsAssignableToRoles/restore", + "microsoft.directory/groups/assignedLabels/update", "microsoft.directory/groups/basic/update", "microsoft.directory/groups/classification/update", "microsoft.directory/groups/delete", diff --git a/RoleDefinitions/a37f8fc3-364b-4d6f-adef-13710ab9c9e8.json b/RoleDefinitions/a37f8fc3-364b-4d6f-adef-13710ab9c9e8.json new file mode 100644 index 000000000..557dd6889 --- /dev/null +++ b/RoleDefinitions/a37f8fc3-364b-4d6f-adef-13710ab9c9e8.json @@ -0,0 +1,21 @@ +{ + "id": "a37f8fc3-364b-4d6f-adef-13710ab9c9e8", + "description": "This role allows partner applications to query legal hold status.", + "displayName": "LegalHoldApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "SetHoldOnMailboxes", + "GetHoldOnMailboxes", + "GetDiscoverySearchConfiguration" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/a5554d9b-f676-4b00-bfb2-27620b316a6e.json b/RoleDefinitions/a5554d9b-f676-4b00-bfb2-27620b316a6e.json new file mode 100644 index 000000000..6a6c22160 --- /dev/null +++ b/RoleDefinitions/a5554d9b-f676-4b00-bfb2-27620b316a6e.json @@ -0,0 +1,46 @@ +{ + "id": "a5554d9b-f676-4b00-bfb2-27620b316a6e", + "description": "This role enables administrators to manage transport rules in an organization.", + "displayName": "Transport Rules", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EtrLimits -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.Powershell.Support) Test-DlpPolicies -ExecutionMode -FileUniqueId -FileUrl -SendReportTo -SiteId -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -SortBy", + "(Microsoft.Exchange.Management.Powershell.Support) Test-Message -Confirm -Force -MessageFileData -Recipients -Sender -SendReportTo -TransportRules -UnifiedDLPRules -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TransportRule -ActivationDate -AdComparisonAttribute -AdComparisonOperator -AddManagerAsRecipientType -AddToRecipients -AnyOfCcHeader -AnyOfCcHeaderMemberOf -AnyOfRecipientAddressContainsWords -AnyOfRecipientAddressMatchesPatterns -AnyOfToCcHeader -AnyOfToCcHeaderMemberOf -AnyOfToHeader -AnyOfToHeaderMemberOf -ApplyClassification -ApplyHtmlDisclaimerFallbackAction -ApplyHtmlDisclaimerLocation -ApplyHtmlDisclaimerText -ApplyOME -ApplyRightsProtectionCustomizationTemplate -ApplyRightsProtectionTemplate -AttachmentContainsWords -AttachmentExtensionMatchesWords -AttachmentHasExecutableContent -AttachmentIsPasswordProtected -AttachmentIsUnsupported -AttachmentMatchesPatterns -AttachmentNameMatchesPatterns -AttachmentProcessingLimitExceeded -AttachmentPropertyContainsWords -AttachmentSizeOver -BetweenMemberOf1 -BetweenMemberOf2 -BlindCopyTo -Comments -Confirm -ContentCharacterSetContainsWords -CopyTo -DeleteMessage -Disconnect -ErrorAction -ErrorVariable -ExceptIfAdComparisonAttribute -ExceptIfAdComparisonOperator -ExceptIfAnyOfCcHeader -ExceptIfAnyOfCcHeaderMemberOf -ExceptIfAnyOfRecipientAddressContainsWords -ExceptIfAnyOfRecipientAddressMatchesPatterns -ExceptIfAnyOfToCcHeader -ExceptIfAnyOfToCcHeaderMemberOf -ExceptIfAnyOfToHeader -ExceptIfAnyOfToHeaderMemberOf -ExceptIfAttachmentContainsWords -ExceptIfAttachmentExtensionMatchesWords -ExceptIfAttachmentHasExecutableContent -ExceptIfAttachmentIsPasswordProtected -ExceptIfAttachmentIsUnsupported -ExceptIfAttachmentMatchesPatterns -ExceptIfAttachmentNameMatchesPatterns -ExceptIfAttachmentProcessingLimitExceeded -ExceptIfAttachmentPropertyContainsWords -ExceptIfAttachmentSizeOver -ExceptIfBetweenMemberOf1 -ExceptIfBetweenMemberOf2 -ExceptIfContentCharacterSetContainsWords -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfFromAddressMatchesPatterns -ExceptIfFromMemberOf -ExceptIfFromScope -ExceptIfHasClassification -ExceptIfHasNoClassification -ExceptIfHasSenderOverride -ExceptIfHeaderContainsMessageHeader -ExceptIfHeaderContainsWords -ExceptIfHeaderMatchesMessageHeader -ExceptIfHeaderMatchesPatterns -ExceptIfManagerAddresses -ExceptIfManagerForEvaluatedUser -ExceptIfMessageSizeOver -ExceptIfMessageTypeMatches -ExceptIfRecipientADAttributeContainsWords -ExceptIfRecipientADAttributeMatchesPatterns -ExceptIfRecipientAddressContainsWords -ExceptIfRecipientAddressMatchesPatterns -ExceptIfRecipientDomainIs -ExceptIfRecipientInSenderList -ExceptIfSCLOver -ExceptIfSenderADAttributeContainsWords -ExceptIfSenderADAttributeMatchesPatterns -ExceptIfSenderDomainIs -ExceptIfSenderInRecipientList -ExceptIfSenderIpRanges -ExceptIfSenderManagementRelationship -ExceptIfSentTo -ExceptIfSentToMemberOf -ExceptIfSentToScope -ExceptIfSubjectContainsWords -ExceptIfSubjectMatchesPatterns -ExceptIfSubjectOrBodyContainsWords -ExceptIfSubjectOrBodyMatchesPatterns -ExceptIfWithImportance -ExpiryDate -From -FromAddressContainsWords -FromAddressMatchesPatterns -FromMemberOf -FromScope -GenerateIncidentReport -GenerateNotification -HasClassification -HasNoClassification -HasSenderOverride -HeaderContainsMessageHeader -HeaderContainsWords -HeaderMatchesMessageHeader -HeaderMatchesPatterns -Identity -IncidentReportContent -LogEventText -ManagerAddresses -ManagerForEvaluatedUser -MessageSizeOver -MessageTypeMatches -Mode -ModerateMessageByManager -ModerateMessageByUser -Name -OutBuffer -OutVariable -PrependSubject -Priority -Quarantine -RecipientADAttributeContainsWords -RecipientADAttributeMatchesPatterns -RecipientAddressContainsWords -RecipientAddressMatchesPatterns -RecipientAddressType -RecipientDomainIs -RecipientInSenderList -RedirectMessageTo -RejectMessageEnhancedStatusCode -RejectMessageReasonText -RemoveHeader -RemoveOME -RemoveOMEv2 -RemoveRMSAttachmentEncryption -RouteMessageOutboundConnector -RouteMessageOutboundRequireTls -RuleErrorAction -RuleSubType -SCLOver -SenderADAttributeContainsWords -SenderADAttributeMatchesPatterns -SenderAddressLocation -SenderDomainIs -SenderInRecipientList -SenderIpRanges -SenderManagementRelationship -SentTo -SentToMemberOf -SentToScope -SetAuditSeverity -SetHeaderName -SetHeaderValue -SetSCL -SmtpRejectMessageRejectStatusCode -SmtpRejectMessageRejectText -StopRuleProcessing -SubjectContainsWords -SubjectMatchesPatterns -SubjectOrBodyContainsWords -SubjectOrBodyMatchesPatterns -WarningAction -WarningVariable -WhatIf -WithImportance", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TransportRule -ActivationDate -AdComparisonAttribute -AdComparisonOperator -AddManagerAsRecipientType -AddToRecipients -AnyOfCcHeader -AnyOfCcHeaderMemberOf -AnyOfRecipientAddressContainsWords -AnyOfRecipientAddressMatchesPatterns -AnyOfToCcHeader -AnyOfToCcHeaderMemberOf -AnyOfToHeader -AnyOfToHeaderMemberOf -ApplyClassification -ApplyHtmlDisclaimerFallbackAction -ApplyHtmlDisclaimerLocation -ApplyHtmlDisclaimerText -ApplyOME -ApplyRightsProtectionCustomizationTemplate -ApplyRightsProtectionTemplate -AttachmentContainsWords -AttachmentExtensionMatchesWords -AttachmentHasExecutableContent -AttachmentIsPasswordProtected -AttachmentIsUnsupported -AttachmentMatchesPatterns -AttachmentNameMatchesPatterns -AttachmentProcessingLimitExceeded -AttachmentPropertyContainsWords -AttachmentSizeOver -BetweenMemberOf1 -BetweenMemberOf2 -BlindCopyTo -Comments -Confirm -ContentCharacterSetContainsWords -CopyTo -DeleteMessage -Disconnect -Enabled -ErrorAction -ErrorVariable -ExceptIfAdComparisonAttribute -ExceptIfAdComparisonOperator -ExceptIfAnyOfCcHeader -ExceptIfAnyOfCcHeaderMemberOf -ExceptIfAnyOfRecipientAddressContainsWords -ExceptIfAnyOfRecipientAddressMatchesPatterns -ExceptIfAnyOfToCcHeader -ExceptIfAnyOfToCcHeaderMemberOf -ExceptIfAnyOfToHeader -ExceptIfAnyOfToHeaderMemberOf -ExceptIfAttachmentContainsWords -ExceptIfAttachmentExtensionMatchesWords -ExceptIfAttachmentHasExecutableContent -ExceptIfAttachmentIsPasswordProtected -ExceptIfAttachmentIsUnsupported -ExceptIfAttachmentMatchesPatterns -ExceptIfAttachmentNameMatchesPatterns -ExceptIfAttachmentProcessingLimitExceeded -ExceptIfAttachmentPropertyContainsWords -ExceptIfAttachmentSizeOver -ExceptIfBetweenMemberOf1 -ExceptIfBetweenMemberOf2 -ExceptIfContentCharacterSetContainsWords -ExceptIfFrom -ExceptIfFromAddressContainsWords -ExceptIfFromAddressMatchesPatterns -ExceptIfFromMemberOf -ExceptIfFromScope -ExceptIfHasClassification -ExceptIfHasNoClassification -ExceptIfHasSenderOverride -ExceptIfHeaderContainsMessageHeader -ExceptIfHeaderContainsWords -ExceptIfHeaderMatchesMessageHeader -ExceptIfHeaderMatchesPatterns -ExceptIfManagerAddresses -ExceptIfManagerForEvaluatedUser -ExceptIfMessageSizeOver -ExceptIfMessageTypeMatches -ExceptIfRecipientADAttributeContainsWords -ExceptIfRecipientADAttributeMatchesPatterns -ExceptIfRecipientAddressContainsWords -ExceptIfRecipientAddressMatchesPatterns -ExceptIfRecipientDomainIs -ExceptIfRecipientInSenderList -ExceptIfSCLOver -ExceptIfSenderADAttributeContainsWords -ExceptIfSenderADAttributeMatchesPatterns -ExceptIfSenderDomainIs -ExceptIfSenderInRecipientList -ExceptIfSenderIpRanges -ExceptIfSenderManagementRelationship -ExceptIfSentTo -ExceptIfSentToMemberOf -ExceptIfSentToScope -ExceptIfSubjectContainsWords -ExceptIfSubjectMatchesPatterns -ExceptIfSubjectOrBodyContainsWords -ExceptIfSubjectOrBodyMatchesPatterns -ExceptIfWithImportance -ExpiryDate -From -FromAddressContainsWords -FromAddressMatchesPatterns -FromMemberOf -FromScope -GenerateIncidentReport -GenerateNotification -HasClassification -HasNoClassification -HasSenderOverride -HeaderContainsMessageHeader -HeaderContainsWords -HeaderMatchesMessageHeader -HeaderMatchesPatterns -IncidentReportContent -LogEventText -ManagerAddresses -ManagerForEvaluatedUser -MessageSizeOver -MessageTypeMatches -Mode -ModerateMessageByManager -ModerateMessageByUser -Name -OutBuffer -OutVariable -PrependSubject -Priority -Quarantine -RecipientADAttributeContainsWords -RecipientADAttributeMatchesPatterns -RecipientAddressContainsWords -RecipientAddressMatchesPatterns -RecipientAddressType -RecipientDomainIs -RecipientInSenderList -RedirectMessageTo -RejectMessageEnhancedStatusCode -RejectMessageReasonText -RemoveHeader -RemoveOME -RemoveOMEv2 -RemoveRMSAttachmentEncryption -RouteMessageOutboundConnector -RouteMessageOutboundRequireTls -RuleErrorAction -RuleSubType -SCLOver -SenderADAttributeContainsWords -SenderADAttributeMatchesPatterns -SenderAddressLocation -SenderDomainIs -SenderInRecipientList -SenderIpRanges -SenderManagementRelationship -SentTo -SentToMemberOf -SentToScope -SetAuditSeverity -SetHeaderName -SetHeaderValue -SetSCL -SmtpRejectMessageRejectStatusCode -SmtpRejectMessageRejectText -StopRuleProcessing -SubjectContainsWords -SubjectMatchesPatterns -SubjectOrBodyContainsWords -SubjectOrBodyMatchesPatterns -UseLegacyRegex -WarningAction -WarningVariable -WhatIf -WithImportance", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-TransportRuleCollection -Confirm -ErrorAction -ErrorVariable -Format -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OMEMessageRevocation -MessageId -Revoke", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OMEConfiguration -BackgroundColor -Confirm -DisclaimerText -EmailText -ExternalMailExpiryInDays -ExternalMailExpiryInterval -Identity -Image -IntroductionText -OTPEnabled -PortalText -PrivacyStatementUrl -ReadButtonText -SocialIdSignIn", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MessageClassification -ClassificationID -Confirm -DisplayName -DisplayPrecedence -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -PermissionMenuVisible -RecipientDescription -RetainClassificationEnabled -SenderDescription -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TransportRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OMEConfiguration -Confirm -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MessageClassification -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OMEConfiguration -BackgroundColor -Confirm -DisclaimerText -EmailText -ExternalMailExpiryInDays -ExternalMailExpiryInterval -Identity -Image -IntroductionText -OTPEnabled -PortalText -PrivacyStatementUrl -ReadButtonText -SocialIdSignIn", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MessageClassification -ClassificationID -Confirm -DisplayName -DisplayPrecedence -ErrorAction -ErrorVariable -Locale -Name -OutBuffer -OutVariable -PermissionMenuVisible -RecipientDescription -RetainClassificationEnabled -SenderDescription -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Import-TransportRuleCollection -Confirm -ErrorAction -ErrorVariable -FileData -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRulePredicate -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRuleAction -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRule -ErrorAction -ErrorVariable -ExcludeConditionActionDetails -Filter -Identity -OutBuffer -OutVariable -ResultSize -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageClassification -ErrorAction -ErrorVariable -Identity -IncludeLocales -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-TransportRule -Confirm -ErrorAction -ErrorVariable -Identity -Mode -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-TransportRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/ab215860-bc9e-48d4-95fc-eb11140a7560.json b/RoleDefinitions/ab215860-bc9e-48d4-95fc-eb11140a7560.json new file mode 100644 index 000000000..72ad1e52c --- /dev/null +++ b/RoleDefinitions/ab215860-bc9e-48d4-95fc-eb11140a7560.json @@ -0,0 +1,19 @@ +{ + "id": "ab215860-bc9e-48d4-95fc-eb11140a7560", + "description": "This role allows partner applications to update site mailbox lifecycle states.", + "displayName": "TeamMailboxLifecycleApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "SetTeamMailbox" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/af7dbf52-3b4e-4123-a173-bfb68cc9dfa5.json b/RoleDefinitions/af7dbf52-3b4e-4123-a173-bfb68cc9dfa5.json new file mode 100644 index 000000000..864f9f44a --- /dev/null +++ b/RoleDefinitions/af7dbf52-3b4e-4123-a173-bfb68cc9dfa5.json @@ -0,0 +1,19 @@ +{ + "id": "af7dbf52-3b4e-4123-a173-bfb68cc9dfa5", + "description": "Allows the app to create, read, update, and delete email in all mailboxes without a signed-in user. Does not include permission to send mail", + "displayName": "Application Mail.ReadWrite", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Mail.ReadWrite" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/b25e0c24-3887-4d86-9b44-381aca63bd40.json b/RoleDefinitions/b25e0c24-3887-4d86-9b44-381aca63bd40.json new file mode 100644 index 000000000..c5d40bda5 --- /dev/null +++ b/RoleDefinitions/b25e0c24-3887-4d86-9b44-381aca63bd40.json @@ -0,0 +1,19 @@ +{ + "id": "b25e0c24-3887-4d86-9b44-381aca63bd40", + "description": null, + "displayName": "Information Protection Admin", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/b42b9d09-1a54-40fd-aa32-cb65e0c95c15.json b/RoleDefinitions/b42b9d09-1a54-40fd-aa32-cb65e0c95c15.json new file mode 100644 index 000000000..847286b2d --- /dev/null +++ b/RoleDefinitions/b42b9d09-1a54-40fd-aa32-cb65e0c95c15.json @@ -0,0 +1,28 @@ +{ + "id": "b42b9d09-1a54-40fd-aa32-cb65e0c95c15", + "description": "Lets people manage tenant allow block list settings.", + "displayName": "Tenant AllowBlockList Manager", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -Ids -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -LogExtraDetails -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -SubmissionID -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ArcConfig -ArcTrustedSealers -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ArcConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -Ids -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListSpoofItems -ErrorAction -ErrorVariable -Identity -Ids -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendingInfrastructure -SpoofedUser -SpoofType -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListItems -Entries -ErrorAction -ErrorVariable -Ids -InformationAction -InformationVariable -ListSubType -ListType -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListItems -Allow -Block -Entry -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/b6187667-1039-4cfd-84b5-f4200629ab11.json b/RoleDefinitions/b6187667-1039-4cfd-84b5-f4200629ab11.json new file mode 100644 index 000000000..49f400a83 --- /dev/null +++ b/RoleDefinitions/b6187667-1039-4cfd-84b5-f4200629ab11.json @@ -0,0 +1,26 @@ +{ + "id": "b6187667-1039-4cfd-84b5-f4200629ab11", + "description": "This role enables individual users to view their retention tags and view and modify their retention tag settings and defaults.", + "displayName": "MyRetentionPolicies", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RetentionPolicyTag -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -MessageClass -OptionalInMailbox -OutBuffer -OutVariable -RetentionId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicyTag -ErrorAction -ErrorVariable -Identity -IncludeSystemTags -Mailbox -OptionalInMailbox -OutBuffer -OutVariable -Types -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/b7274051-582f-4989-ab82-21dc2a68c7e2.json b/RoleDefinitions/b7274051-582f-4989-ab82-21dc2a68c7e2.json new file mode 100644 index 000000000..b63c4d93d --- /dev/null +++ b/RoleDefinitions/b7274051-582f-4989-ab82-21dc2a68c7e2.json @@ -0,0 +1,140 @@ +{ + "id": "b7274051-582f-4989-ab82-21dc2a68c7e2", + "description": "Allows viewing configuration and reports for Security features.", + "displayName": "Security Reader", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficATPReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -NumberOfRows -OutBuffer -OutVariable -Page -PageSize -PivotBy -ProbeTag -StartDate -SummarizeBy -ThreatClassification -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetailV2 -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceV2 -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -ResultSize -SenderAddress -StartDate -StartingRecipientAddress -Status -Subject -SubjectFilterType -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TDPReport -EndDate -ErrorAction -ErrorVariable -HVEAccountAddress -OutBuffer -OutVariable -ProbeTag -ReportType -ResultSize -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantRecipientLimitInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDomainGroup -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessage -Confirm -Direction -Domain -EndExpiresDate -EndReceivedDate -ErrorAction -ErrorVariable -Identity -IncludeMessagesFromBlockedSenderAddress -MessageId -MoveToQuarantineAdminActionTakenBy -MoveToQuarantineApprovalId -MyItems -OutBuffer -OutVariable -Page -PageSize -PolicyName -PolicyTypes -QuarantineTypes -RecipientAddress -RecipientTag -ReleaseStatus -Reported -SearchOnlyDeletedMessages -SenderAddress -StartExpiresDate -StartReceivedDate -Subject -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IPv6StatusForAcceptedDomain -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SmtpDaneInboundStatus -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuotaEligibility -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionQuota -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoSecOpsOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ExoPhishSimOverrideRule -DomainController -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DnssecStatusForVerifiedDomain -DomainName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PipelineVariable -SkipDnsValidation -SkipMtaStsValidation -SkipMxValidation -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -State -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantExemptionInfo -BlockingScenario -Details -NumberOfDays", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EtrLimits -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantExemptionInfo -BlockingScenario", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Preview-QuarantineMessage -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessageHeader -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DetailZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AggregateZapReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ArcConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPEvaluationRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoDetailReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ContentMalwareMdoAggregateReport -DetectionTechnology -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedConnector -ConnectorId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPBuiltInProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListItems -Allow -Block -Entry -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SecOpsOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantinePolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantinePolicyType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PhishSimOverridePolicy -DomainController -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EmailTenantSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Identity -IsVIP", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReportSeries -AggregateBy -ConnectorIds -Domain -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -GroupByFields -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofIntelligenceInsight -AllowedToSpoof -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TransportRule -DlpPolicy -ErrorAction -ErrorVariable -ExcludeConditionActionDetails -Filter -Identity -OutBuffer -OutVariable -ResultSize -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatSummary -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatProfileDetails -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProtectionStatusFilter -SenderDomainFilter -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatInstances -AnyFilter -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PageSize -ProtectionStatusFilter -SenderDomainFilter -StartPage -StartTime -SummarizeBy -ThreatFamilyFilter -ThreatType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatDetails -Base64FileHash -EndTime -ErrorAction -ErrorVariable -FileHash -OutBuffer -OutVariable -StartTime -ThreatType -UserPrincipalName -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignProfile -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignIndustries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatCampaignCountries -EndTime -ErrorAction -ErrorVariable -OutBuffer -OutVariable -StartTime -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ThreatFamily -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ThreatArticle -ArticleURL -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SubmissionCategoryReport -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofMailReport -Action -Direction -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityReport -AggregateBy -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityDetailsReport -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Sender -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksDetailReport -Action -AppNameList -Domain -EndDate -Page -PageSize -RecipientAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksAggregateReport -Action -AppNameList -EndDate -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportScheduleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSchedule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportExecutionInstance -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -Capabilities -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PerimeterMessageTrace -End -Recipient -Sender -Start", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetail -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrace -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -Status -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficTopReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficSummaryReport -Category -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficPolicyReport -Action -AggregateBy -Direction -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFlowStatusReport -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFilterListReport -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -ProbeTag -SelectionTarget -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailTransportRuleReport -Action -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEvaluationModeReport -ConnectorId -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailATPReport -DataSource -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -IsV2Report -MalwareName -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportSummary -Action -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportDetails -Action -AggregateBy -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedConnectionFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReport -AggregateBy -ConnectorId -Direction -EndDate -ErrorAction -ErrorVariable -EventSubType -EventType -IsComplexRouted -IsEvaluationMode -IsScanAndDrop -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientDomain -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EOPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpIncidentDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetectionsReport -Action -AggregateBy -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -SummarizeBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DkimSigningConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassificationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomizedUserSubmission -AggregateBy -Debug -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -SubmissionNetworkMessageId -SubmittedBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConfigAnalyzerPolicyRecommendation -ErrorAction -ErrorVariable -Identity -IsAppliedToDisabled -OutBuffer -OutVariable -RecommendedPolicyType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserDetailReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompromisedUserAggregateReport -Action -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicyFileSyncNotification -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedSenderAddress -SenderAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AtpPolicyForO365 -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishPolicy -Advanced -ErrorAction -ErrorVariable -Identity -Impersonation -OutBuffer -OutVariable -Spoof -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionTrafficReport -Action -AggregateBy -Direction -DisplayBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MalwareName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentReport -Action -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentDetail -Action -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPTotalTrafficReport -Action -AggregateBy -Direction -Domain -DurationDays -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/b8aa80f6-1e65-4e25-955a-bb56dfe581f0.json b/RoleDefinitions/b8aa80f6-1e65-4e25-955a-bb56dfe581f0.json new file mode 100644 index 000000000..625b46811 --- /dev/null +++ b/RoleDefinitions/b8aa80f6-1e65-4e25-955a-bb56dfe581f0.json @@ -0,0 +1,25 @@ +{ + "id": "b8aa80f6-1e65-4e25-955a-bb56dfe581f0", + "description": "This role enables administrators to delegate mailbox permissions.", + "displayName": "MyMailboxDelegation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -GrantSendOnBehalfTo -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/bb878cdb-b11f-4eaa-b8ff-3cc96644b5bc.json b/RoleDefinitions/bb878cdb-b11f-4eaa-b8ff-3cc96644b5bc.json new file mode 100644 index 000000000..c00e7d92b --- /dev/null +++ b/RoleDefinitions/bb878cdb-b11f-4eaa-b8ff-3cc96644b5bc.json @@ -0,0 +1,23 @@ +{ + "id": "bb878cdb-b11f-4eaa-b8ff-3cc96644b5bc", + "displayName": "PatchMyPC", + "description": "", + "resourceScopes": [ + "/" + ], + "isBuiltIn": false, + "isEnabled": true, + "templateId": "bb878cdb-b11f-4eaa-b8ff-3cc96644b5bc", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/MobileApps/Read", + "Microsoft.Intune/MobileApps/Update", + "Microsoft.Intune/MobileApps/Create", + "Microsoft.Intune/MobileApps/Relate" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/bd1714c2-f570-4b79-bbe8-16e7a099602d.json b/RoleDefinitions/bd1714c2-f570-4b79-bbe8-16e7a099602d.json new file mode 100644 index 000000000..c9629f09f --- /dev/null +++ b/RoleDefinitions/bd1714c2-f570-4b79-bbe8-16e7a099602d.json @@ -0,0 +1,40 @@ +{ + "id": "bd1714c2-f570-4b79-bbe8-16e7a099602d", + "description": "This role enables administrators to configure whether data within a mailbox should be retained for litigation purposes in an organization.", + "displayName": "Legal Hold", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -AccountDisabled -Confirm -ElcProcessingDisabled -ExcludeFromAllOrgHolds -ExcludeFromOrgHolds -Force -GroupMailbox -Identity -InactiveMailbox -LitigationHoldDate -LitigationHoldDuration -LitigationHoldEnabled -LitigationHoldOwner -NonCompliantDevices -RecalculateInactiveMailbox -RemoveDelayHoldApplied -RemoveDelayReleaseHoldApplied -RemoveOrphanedHolds -RetentionComment -RetentionPolicy -RetentionUrl -SingleItemRecoveryEnabled -StsRefreshTokensValidFrom -UpdateEnforcedTimestamp", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailUser -EnableLitigationHoldForMigration -ExcludeFromAllOrgHolds -ExcludeFromOrgHolds -Identity -RecalculateInactiveMailUser -RemoveComplianceTagHoldApplied -RemoveDelayHoldApplied -RemoveDelayReleaseHoldApplied -RemoveDisabledArchive -RemoveLitigationHoldEnabled -RemoveOrphanedHolds", + "SetHoldOnMailboxes", + "GetHoldOnMailboxes", + "GetDiscoverySearchConfiguration", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxSearch -Confirm -Description -ErrorAction -ErrorVariable -Force -Identity -InPlaceHoldEnabled -ItemHoldPeriod -Name -OutBuffer -OutVariable -SourceMailboxes -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxSearch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxSearch -Confirm -Description -ErrorAction -ErrorVariable -Force -InPlaceHoldEnabled -InPlaceHoldIdentity -ItemHoldPeriod -Name -OutBuffer -OutVariable -SourceMailboxes -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -Anr -ErrorAction -ErrorVariable -Filter -Identity -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxSearch -ErrorAction -ErrorVariable -Identity -InPlaceHoldIdentity -OutBuffer -OutVariable -ResultSize -ShowDeletionInProgressSearches -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/c1d9fcbb-cba5-40b0-bf6b-527006585f4b.json b/RoleDefinitions/c1d9fcbb-cba5-40b0-bf6b-527006585f4b.json new file mode 100644 index 000000000..0e70fc204 --- /dev/null +++ b/RoleDefinitions/c1d9fcbb-cba5-40b0-bf6b-527006585f4b.json @@ -0,0 +1,60 @@ +{ + "id": "c1d9fcbb-cba5-40b0-bf6b-527006585f4b", + "displayName": "Application Manager", + "description": "Application Managers manage mobile and managed applications, can read device information and can view device configuration profiles.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "c1d9fcbb-cba5-40b0-bf6b-527006585f4b", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/MobileApps/Create", + "Microsoft.Intune/MobileApps/Read", + "Microsoft.Intune/MobileApps/Update", + "Microsoft.Intune/MobileApps/Delete", + "Microsoft.Intune/MobileApps/Assign", + "Microsoft.Intune/MobileApps/Relate", + "Microsoft.Intune/ManagedDevices/Read", + "Microsoft.Intune/ManagedApps/Create", + "Microsoft.Intune/ManagedApps/Read", + "Microsoft.Intune/ManagedApps/Update", + "Microsoft.Intune/ManagedApps/Delete", + "Microsoft.Intune/ManagedApps/Assign", + "Microsoft.Intune/ManagedApps/Wipe", + "Microsoft.Intune/AndroidSync/Read", + "Microsoft.Intune/AndroidSync/UpdateApps", + "Microsoft.Intune/DeviceConfigurations/Read", + "Microsoft.Intune/PolicySets/Assign", + "Microsoft.Intune/PolicySets/Create", + "Microsoft.Intune/PolicySets/Delete", + "Microsoft.Intune/PolicySets/Read", + "Microsoft.Intune/PolicySets/Update", + "Microsoft.Intune/AssignmentFilter/Create", + "Microsoft.Intune/AssignmentFilter/Delete", + "Microsoft.Intune/AssignmentFilter/Read", + "Microsoft.Intune/AssignmentFilter/Update", + "Microsoft.Intune/MicrosoftDefenderATP/Read", + "Microsoft.Intune/MicrosoftStoreForBusiness/Read", + "Microsoft.Intune/WindowsEnterpriseCertificate/Read", + "Microsoft.Intune/PartnerDeviceManagement/Read", + "Microsoft.Intune/MobileThreatDefense/Read", + "Microsoft.Intune/CertificateConnector/Read", + "Microsoft.Intune/DerivedCredentials/Read", + "Microsoft.Intune/Customization/Read", + "Microsoft.Intune/CloudAttach/ResourceExplorer", + "Microsoft.Intune/CloudAttach/ClientDetails", + "Microsoft.Intune/CloudAttach/Timeline", + "Microsoft.Intune/CloudAttach/Collections", + "Microsoft.Intune/CloudAttach/Applications", + "Microsoft.Intune/CloudAttach/ApplicationActions", + "Microsoft.Intune/CloudAttach/SoftwareUpdates" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/c316f329-ff2d-4e55-87d2-2a9d628645ec.json b/RoleDefinitions/c316f329-ff2d-4e55-87d2-2a9d628645ec.json new file mode 100644 index 000000000..938597f28 --- /dev/null +++ b/RoleDefinitions/c316f329-ff2d-4e55-87d2-2a9d628645ec.json @@ -0,0 +1,24 @@ +{ + "id": "c316f329-ff2d-4e55-87d2-2a9d628645ec", + "description": "", + "displayName": "MyName", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": false, + "templateId": "tplantcomau.onmicrosoft.com\\MyProfileInformation", + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -FirstName -Identity -Initials -LastName -Notes", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/c56d53a2-73d0-4502-b6bd-4a9d3dba28d5.json b/RoleDefinitions/c56d53a2-73d0-4502-b6bd-4a9d3dba28d5.json new file mode 100644 index 000000000..4bc394782 --- /dev/null +++ b/RoleDefinitions/c56d53a2-73d0-4502-b6bd-4a9d3dba28d5.json @@ -0,0 +1,111 @@ +{ + "id": "c56d53a2-73d0-4502-b6bd-4a9d3dba28d5", + "displayName": "Endpoint Security Manager", + "description": "Manages security and compliance features such as security baselines, device compliance, conditional access, and Microsoft Defender ATP.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "c56d53a2-73d0-4502-b6bd-4a9d3dba28d5", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/MobileApps/Read", + "Microsoft.Intune/TermsAndConditions/Read", + "Microsoft.Intune/ManagedApps/Read", + "Microsoft.Intune/ManagedDevices/Delete", + "Microsoft.Intune/ManagedDevices/Read", + "Microsoft.Intune/ManagedDevices/Update", + "Microsoft.Intune/ManagedDevices/SetPrimaryUser", + "Microsoft.Intune/ManagedDevices/ViewReports", + "Microsoft.Intune/DeviceConfigurations/Read", + "Microsoft.Intune/DeviceConfigurations/ViewReports", + "Microsoft.Intune/DeviceCompliancePolices/Create", + "Microsoft.Intune/DeviceCompliancePolices/Read", + "Microsoft.Intune/DeviceCompliancePolices/ViewReports", + "Microsoft.Intune/DeviceCompliancePolices/Update", + "Microsoft.Intune/DeviceCompliancePolices/Delete", + "Microsoft.Intune/DeviceCompliancePolices/Assign", + "Microsoft.Intune/TelecomExpenses/Read", + "Microsoft.Intune/RemoteAssistance/Read", + "Microsoft.Intune/RemoteAssistance/ViewReports", + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/EndpointProtection/Read", + "Microsoft.Intune/EnrollmentProgramToken/Read", + "Microsoft.Intune/AppleEnrollmentProfiles/Read", + "Microsoft.Intune/AppleDeviceSerialNumbers/Read", + "Microsoft.Intune/DeviceEnrollmentManagers/Read", + "Microsoft.Intune/CorporateDeviceIdentifiers/Read", + "Microsoft.Intune/Roles/Read", + "Microsoft.Intune/Reports/Read", + "Microsoft.Intune/AndroidSync/Read", + "Microsoft.Intune/Audit/Read", + "Microsoft.Intune/RemoteTasks/ConfigurationManagerAction", + "Microsoft.Intune/RemoteTasks/GetFileVaultKey", + "Microsoft.Intune/RemoteTasks/RebootNow", + "Microsoft.Intune/RemoteTasks/RemoteLock", + "Microsoft.Intune/RemoteTasks/RotateBitLockerKeys", + "Microsoft.Intune/RemoteTasks/RotateFileVaultKey", + "Microsoft.Intune/RemoteTasks/ShutDown", + "Microsoft.Intune/RemoteTasks/SyncDevice", + "Microsoft.Intune/RemoteTasks/WindowsDefender", + "Microsoft.Intune/SecurityBaselines/Create", + "Microsoft.Intune/SecurityBaselines/Read", + "Microsoft.Intune/SecurityBaselines/Update", + "Microsoft.Intune/SecurityBaselines/Delete", + "Microsoft.Intune/SecurityBaselines/Assign", + "Microsoft.Intune/ASRPolicy/Create", + "Microsoft.Intune/ASRPolicy/Read", + "Microsoft.Intune/ASRPolicy/Update", + "Microsoft.Intune/ASRPolicy/Delete", + "Microsoft.Intune/ASRPolicy/Assign", + "Microsoft.Intune/ASRPolicy/ViewReports", + "Microsoft.Intune/EDRPolicy/Create", + "Microsoft.Intune/EDRPolicy/Read", + "Microsoft.Intune/EDRPolicy/Update", + "Microsoft.Intune/EDRPolicy/Delete", + "Microsoft.Intune/EDRPolicy/Assign", + "Microsoft.Intune/EDRPolicy/ViewReports", + "Microsoft.Intune/AppControlPolicy/Create", + "Microsoft.Intune/AppControlPolicy/Read", + "Microsoft.Intune/AppControlPolicy/Update", + "Microsoft.Intune/AppControlPolicy/Delete", + "Microsoft.Intune/AppControlPolicy/Assign", + "Microsoft.Intune/AppControlPolicy/ViewReports", + "Microsoft.Intune/SecurityTasks/Read", + "Microsoft.Intune/SecurityTasks/Update", + "Microsoft.Intune/PolicySets/Read", + "Microsoft.Intune/AssignmentFilter/Read", + "Microsoft.Intune/EndpointAnalytics/Read", + "Microsoft.Intune/MicrosoftDefenderATP/Read", + "Microsoft.Intune/MicrosoftStoreForBusiness/Read", + "Microsoft.Intune/WindowsEnterpriseCertificate/Read", + "Microsoft.Intune/PartnerDeviceManagement/Read", + "Microsoft.Intune/MobileThreatDefense/Read", + "Microsoft.Intune/MobileThreatDefense/Modify", + "Microsoft.Intune/CertificateConnector/Read", + "Microsoft.Intune/DerivedCredentials/Read", + "Microsoft.Intune/Customization/Read", + "Microsoft.Intune/AndroidFota/Read", + "Microsoft.Intune/CloudAttach/ResourceExplorer", + "Microsoft.Intune/CloudAttach/ClientDetails", + "Microsoft.Intune/CloudAttach/Timeline", + "Microsoft.Intune/CloudAttach/Collections", + "Microsoft.Intune/CloudAttach/CMPivot", + "Microsoft.Intune/CloudAttach/Scripts", + "Microsoft.Intune/CloudAttach/SoftwareUpdates", + "Microsoft.Intune/EpmPolicy/Create", + "Microsoft.Intune/EpmPolicy/Read", + "Microsoft.Intune/EpmPolicy/Update", + "Microsoft.Intune/EpmPolicy/Delete", + "Microsoft.Intune/EpmPolicy/Assign", + "Microsoft.Intune/EpmPolicy/ViewReports", + "Microsoft.Intune/EpmPolicy/ViewElevationRequests", + "Microsoft.Intune/EpmPolicy/ModifyElevationRequests" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/c99d766d-5f47-4c10-8a70-1223674808b5.json b/RoleDefinitions/c99d766d-5f47-4c10-8a70-1223674808b5.json new file mode 100644 index 000000000..3b1809a4b --- /dev/null +++ b/RoleDefinitions/c99d766d-5f47-4c10-8a70-1223674808b5.json @@ -0,0 +1,19 @@ +{ + "id": "c99d766d-5f47-4c10-8a70-1223674808b5", + "description": "Allows the app to read all contacts in all mailboxes without a signed-in user", + "displayName": "Application Contacts.Read", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Contacts.Read" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/cbd5141c-3d96-4aa5-8c5c-aecf7fbce8ae.json b/RoleDefinitions/cbd5141c-3d96-4aa5-8c5c-aecf7fbce8ae.json new file mode 100644 index 000000000..9d3dae566 --- /dev/null +++ b/RoleDefinitions/cbd5141c-3d96-4aa5-8c5c-aecf7fbce8ae.json @@ -0,0 +1,27 @@ +{ + "id": "cbd5141c-3d96-4aa5-8c5c-aecf7fbce8ae", + "description": "This role allows partner applications to call meeting graph APIs.", + "displayName": "MeetingGraphApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "UpdateMeetingSpace", + "UpdateMeetingInstance", + "GetMeetingSpace", + "GetMeetingInstance", + "FindMeetingSpaceByJoinUrl", + "DeleteMeetingSpace", + "DeleteMeetingInstance", + "CreateMeetingSpace", + "CreateMeetingInstance" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/cc179eec-f2fd-41ac-b03b-f38f4556490d.json b/RoleDefinitions/cc179eec-f2fd-41ac-b03b-f38f4556490d.json new file mode 100644 index 000000000..b9ff760f1 --- /dev/null +++ b/RoleDefinitions/cc179eec-f2fd-41ac-b03b-f38f4556490d.json @@ -0,0 +1,19 @@ +{ + "id": "cc179eec-f2fd-41ac-b03b-f38f4556490d", + "description": null, + "displayName": "Insider Risk Management Investigation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/cda30281-db74-42c2-9fb8-501f2e43c117.json b/RoleDefinitions/cda30281-db74-42c2-9fb8-501f2e43c117.json new file mode 100644 index 000000000..b1e6b16b8 --- /dev/null +++ b/RoleDefinitions/cda30281-db74-42c2-9fb8-501f2e43c117.json @@ -0,0 +1,40 @@ +{ + "id": "cda30281-db74-42c2-9fb8-501f2e43c117", + "description": "This role enables administrators to import and export mailbox content and to purge unwanted content from a mailbox.", + "displayName": "Mailbox Import Export", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReviewItems -Disposed -IncludeHeaders -PagingCookie -TargetLabelId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RecoverableItems -Debug -EntryID -ErrorAction -ErrorVariable -FilterEndTime -FilterItemType -FilterStartTime -Identity -LastParentFolderID -MaxParallelSize -OutBuffer -OutVariable -PolicyTag -ResultSize -SkipCount -SourceFolder -SubjectContains -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Restore-RecoverableItems -Debug -EntryID -ErrorAction -ErrorVariable -FilterEndTime -FilterItemType -FilterStartTime -Identity -LastParentFolderID -MaxParallelSize -NoOutput -OutBuffer -OutVariable -PolicyTag -RestoreTargetFolder -ResultSize -SourceFolder -SubjectContains -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxImportRequestStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Suspend-MailboxImportRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SuspendComment -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxImportRequest -AcceptLargeDataLoss -AzureSharedAccessSignatureToken -BadItemLimit -BatchName -CompletedRequestAgeLimit -Confirm -ErrorAction -ErrorVariable -Identity -LargeItemLimit -OutBuffer -OutVariable -RemoteCredential -RemoteHostName -RequestExpiryInterval -SkipInitialConnectionValidation -SkipMerging -SkippedItemApprovalTime -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-Mailbox -Confirm -DeleteContent -DoNotIncludeArchive -ErrorAction -ErrorVariable -EstimateResultOnly -Force -Identity -IncludeUnsearchableItems -LogLevel -LogOnly -OutBuffer -OutVariable -SearchDumpster -SearchDumpsterOnly -SearchQuery -TargetFolder -TargetMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Resume-MailboxImportRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TeamChat -Debug -DomainController -EmailAddress -ErrorAction -ErrorVariable -Identity -Organization -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxImportRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxImportRequest -AcceptLargeDataLoss -AssociatedMessagesCopyOption -AzureBlobStorageAccountUri -AzureSharedAccessSignatureToken -AzureStatusPublishEndpointInfo -BadItemLimit -BatchName -CompletedRequestAgeLimit -Confirm -ConflictResolutionOption -ContentCodePage -ErrorAction -ErrorVariable -ExcludeDumpster -ExcludeFolders -IncludeFolders -IsArchive -LargeItemLimit -Mailbox -MigrationBatch -MigrationMailbox -MigrationUser -MRSContentFilterSasUri -Name -OutBuffer -OutVariable -RemoteCredential -RemoteFilePath -RemoteHostName -RequestExpiryInterval -SkipInitialConnectionValidation -SkipMerging -SourceEndpoint -SourceRootFolder -Suspend -SuspendComment -TargetRootFolder -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxImportRequest -BatchName -ErrorAction -ErrorVariable -Identity -Mailbox -Name -OutBuffer -OutVariable -ResultSize -Status -Suspend -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/cf98e0e8-70a4-40c1-9f07-ba5d597627dc.json b/RoleDefinitions/cf98e0e8-70a4-40c1-9f07-ba5d597627dc.json new file mode 100644 index 000000000..2957b7b08 --- /dev/null +++ b/RoleDefinitions/cf98e0e8-70a4-40c1-9f07-ba5d597627dc.json @@ -0,0 +1,20 @@ +{ + "id": "cf98e0e8-70a4-40c1-9f07-ba5d597627dc", + "description": "This role allows partner applications to send email messages.", + "displayName": "SendMailApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "SendItem", + "CreateItem" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/d2dac9cb-5605-4ff8-914c-4746ae927ed0.json b/RoleDefinitions/d2dac9cb-5605-4ff8-914c-4746ae927ed0.json new file mode 100644 index 000000000..1a51deddb --- /dev/null +++ b/RoleDefinitions/d2dac9cb-5605-4ff8-914c-4746ae927ed0.json @@ -0,0 +1,158 @@ +{ + "id": "d2dac9cb-5605-4ff8-914c-4746ae927ed0", + "description": "This role enables administrators to manage antivirus and anti-spam features in an organization.", + "displayName": "Transport Hygiene", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessage -Confirm -Direction -Domain -EndExpiresDate -EndReceivedDate -EntityType -ErrorAction -ErrorVariable -Identity -IncludeMessagesFromBlockedSenderAddress -MessageId -MoveToQuarantineAdminActionTakenBy -MoveToQuarantineApprovalId -MyItems -OutBuffer -OutVariable -Page -PageSize -PolicyName -PolicyTypes -QuarantineTypes -RecipientAddress -RecipientTag -ReleaseStatus -Reported -SearchOnlyDeletedMessages -SenderAddress -StartExpiresDate -StartReceivedDate -Subject -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Delete-QuarantineMessage -Confirm -Debug -DomainController -EntityType -ErrorAction -ErrorVariable -HardDelete -Identities -Identity -OutBuffer -OutVariable -RecipientAddress -Undelete -Verbose", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -Ids -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListItems -Allow -Block -Entries -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -LogExtraDetails -NoExpiration -Notes -OutBuffer -OutputJson -OutVariable -PipelineVariable -RemoveAfter -SubmissionID -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-QuarantinePermissions -Confirm -Debug -Description -DomainController -ErrorAction -ErrorVariable -Force -LastModifiedTime -OutBuffer -OutVariable -PermissionToAllowSender -PermissionToBlockSender -PermissionToDelete -PermissionToDownload -PermissionToPreview -PermissionToRelease -PermissionToRequestRelease -PermissionToViewHeader -QuarantinePermissionsObject -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AntiPhishPolicy -AdminDisplayName -AuthenticationFailAction -Confirm -DmarcQuarantineAction -DmarcRejectAction -EnableAntiSpoofEnforcement -Enabled -EnableFirstContactSafetyTips -EnableMailboxIntelligence -EnableMailboxIntelligenceProtection -EnableOrganizationDomainsProtection -EnableSimilarDomainsSafetyTips -EnableSimilarUsersSafetyTips -EnableSpoofIntelligence -EnableSuspiciousSafetyTip -EnableTargetedDomainsProtection -EnableTargetedUserProtection -EnableUnauthenticatedSender -EnableUnusualCharactersSafetyTips -EnableViaTag -ErrorAction -ErrorVariable -ExcludedDomains -ExcludedSenders -ExcludedSubDomains -HonorDmarcPolicy -Identity -ImpersonationProtectionState -MailboxIntelligenceProtectionAction -MailboxIntelligenceProtectionActionRecipients -MailboxIntelligenceQuarantineTag -MakeDefault -OutBuffer -OutVariable -PhishThresholdLevel -PolicyTag -SpoofQuarantineTag -TargetedDomainActionRecipients -TargetedDomainProtectionAction -TargetedDomainQuarantineTag -TargetedDomainsToProtect -TargetedUserActionRecipients -TargetedUserProtectionAction -TargetedUserQuarantineTag -TargetedUsersToProtect -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-QuarantinePermissions -AdminDisplayName -ErrorAction -ErrorVariable -OutBuffer -OutVariable -PermissionToAllowSender -PermissionToBlockSender -PermissionToDelete -PermissionToDownload -PermissionToPreview -PermissionToRelease -PermissionToRequestRelease -PermissionToViewHeader -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AntiPhishPolicy -AdminDisplayName -AuthenticationFailAction -Confirm -DmarcQuarantineAction -DmarcRejectAction -Enabled -EnableFirstContactSafetyTips -EnableMailboxIntelligence -EnableMailboxIntelligenceProtection -EnableOrganizationDomainsProtection -EnableSimilarDomainsSafetyTips -EnableSimilarUsersSafetyTips -EnableSpoofIntelligence -EnableSuspiciousSafetyTip -EnableTargetedDomainsProtection -EnableTargetedUserProtection -EnableUnauthenticatedSender -EnableUnusualCharactersSafetyTips -EnableViaTag -ErrorAction -ErrorVariable -ExcludedDomains -ExcludedSenders -ExcludedSubDomains -Force -HonorDmarcPolicy -ImpersonationProtectionState -MailboxIntelligenceProtectionAction -MailboxIntelligenceProtectionActionRecipients -MailboxIntelligenceQuarantineTag -MakeDefault -Name -OutBuffer -OutVariable -PhishThresholdLevel -PolicyTag -RecommendedPolicyType -SimilarUsersSafetyTipsCustomText -SpoofQuarantineTag -TargetedDomainActionRecipients -TargetedDomainProtectionAction -TargetedDomainQuarantineTag -TargetedDomainsToProtect -TargetedUserActionRecipients -TargetedUserProtectionAction -TargetedUserQuarantineTag -TargetedUsersToProtect -UnusualCharactersSafetyTipsCustomText -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-QuarantinePolicy -AdminDisplayName -AdminNotificationFrequencyInDays -AdminNotificationLanguage -AdminNotificationsEnabled -AdminQuarantinePermissionsList -Confirm -CustomDisclaimer -Debug -Description -DomainController -EndUserQuarantinePermissions -EndUserQuarantinePermissionsValue -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationFrequency -EndUserSpamNotificationFrequencyInDays -EndUserSpamNotificationLanguage -ErrorAction -ErrorVariable -EsnCustomSubject -ESNEnabled -Force -Identity -IgnoreDehydratedFlag -IncludeMessagesFromBlockedSenderAddress -LastModifiedTime -MultiLanguageCustomDisclaimer -MultiLanguageSenderName -MultiLanguageSetting -Name -OrganizationBrandingEnabled -OutBuffer -OutVariable -QuarantineRetentionDays -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-QuarantinePolicy -AdminDisplayName -AdminNotificationFrequencyInDays -AdminNotificationLanguage -AdminNotificationsEnabled -AdminQuarantinePermissionsList -CustomDisclaimer -Debug -DomainController -EndUserQuarantinePermissions -EndUserQuarantinePermissionsValue -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationFrequency -EndUserSpamNotificationFrequencyInDays -EndUserSpamNotificationLanguage -ErrorAction -ErrorVariable -EsnCustomSubject -ESNEnabled -IncludeMessagesFromBlockedSenderAddress -MultiLanguageCustomDisclaimer -MultiLanguageSenderName -MultiLanguageSetting -Name -OrganizationBrandingEnabled -OutBuffer -OutVariable -QuarantinePolicyType -QuarantineRetentionDays -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamsProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -State -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedContentFilterPolicy -AddXHeaderValue -AdminDisplayName -AllowedSenderDomains -AllowedSenders -BlockedSenderDomains -BlockedSenders -BulkQuarantineTag -BulkSpamAction -BulkThreshold -Confirm -DownloadLink -EnableEndUserSpamNotifications -EnableLanguageBlockList -EnableRegionBlockList -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationCustomFromName -EndUserSpamNotificationCustomSubject -EndUserSpamNotificationFrequency -EndUserSpamNotificationLanguage -EndUserSpamNotificationLimit -ErrorAction -ErrorVariable -Group -HighConfidencePhishAction -HighConfidencePhishQuarantineTag -HighConfidenceSpamAction -HighConfidenceSpamQuarantineTag -IncreaseScoreWithBizOrInfoUrls -IncreaseScoreWithImageLinks -IncreaseScoreWithNumericIps -IncreaseScoreWithRedirectToOtherPort -InlineSafetyTipsEnabled -IntraOrgFilterState -LanguageBlockList -MarkAsSpamBulkMail -MarkAsSpamEmbedTagsInHtml -MarkAsSpamEmptyMessages -MarkAsSpamFormTagsInHtml -MarkAsSpamFramesInHtml -MarkAsSpamFromAddressAuthFail -MarkAsSpamJavaScriptInHtml -MarkAsSpamNdrBackscatter -MarkAsSpamObjectTagsInHtml -MarkAsSpamSensitiveWordList -MarkAsSpamSpfRecordHardFail -MarkAsSpamWebBugsInHtml -MatchSubDomains -ModifySubjectValue -Name -OutBuffer -OutVariable -PhishQuarantineTag -PhishSpamAction -PhishZapEnabled -QuarantineRetentionPeriod -RecommendedPolicyType -RedirectToRecipients -RegionBlockList -SpamAction -SpamQuarantineTag -SpamZapEnabled -TestModeAction -TestModeBccToRecipients -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedContentFilterPolicy -AddXHeaderValue -AdminDisplayName -AllowedSenderDomains -AllowedSenders -BlockedSenderDomains -BlockedSenders -BulkQuarantineTag -BulkSpamAction -BulkThreshold -Confirm -DownloadLink -EnableEndUserSpamNotifications -EnableLanguageBlockList -EnableRegionBlockList -EndUserSpamNotificationCustomFromAddress -EndUserSpamNotificationCustomFromName -EndUserSpamNotificationCustomSubject -EndUserSpamNotificationFrequency -EndUserSpamNotificationLanguage -EndUserSpamNotificationLimit -ErrorAction -ErrorVariable -Group -HighConfidencePhishAction -HighConfidencePhishQuarantineTag -HighConfidenceSpamAction -HighConfidenceSpamQuarantineTag -Identity -IncreaseScoreWithBizOrInfoUrls -IncreaseScoreWithImageLinks -IncreaseScoreWithNumericIps -IncreaseScoreWithRedirectToOtherPort -InlineSafetyTipsEnabled -IntraOrgFilterState -LanguageBlockList -MakeDefault -MarkAsSpamBulkMail -MarkAsSpamEmbedTagsInHtml -MarkAsSpamEmptyMessages -MarkAsSpamFormTagsInHtml -MarkAsSpamFramesInHtml -MarkAsSpamFromAddressAuthFail -MarkAsSpamJavaScriptInHtml -MarkAsSpamNdrBackscatter -MarkAsSpamObjectTagsInHtml -MarkAsSpamSensitiveWordList -MarkAsSpamSpfRecordHardFail -MarkAsSpamWebBugsInHtml -MatchSubDomains -ModifySubjectValue -OutBuffer -OutVariable -PhishQuarantineTag -PhishSpamAction -PhishZapEnabled -QuarantineRetentionPeriod -RedirectToRecipients -RegionBlockList -SafetyTipsLiteEnabled -SpamAction -SpamQuarantineTag -SpamZapEnabled -TestModeAction -TestModeBccToRecipients -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TeamsProtectionPolicyRule -Comments -Confirm -Debug -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TeamsProtectionPolicy -AdminDisplayName -Confirm -Debug -ErrorAction -ErrorVariable -HighConfidencePhishQuarantineTag -Identity -MalwareQuarantineTag -Organization -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TeamsProtectionPolicyRule -Comments -Confirm -Debug -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -Organization -OutBuffer -OutVariable -TeamsProtectionPolicy -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TeamsProtectionPolicy -AdminDisplayName -Confirm -Debug -ErrorAction -ErrorVariable -HighConfidencePhishQuarantineTag -MalwareQuarantineTag -Name -Organization -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AtpPolicyForO365 -AllowSafeDocsOpen -Confirm -EnableATPForSPOTeamsODB -EnableSafeDocs -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSubmissionPolicy -Confirm -ConfirmationNotificationEnabled -ConfirmationNotificationForChatMessageEnabled -ConfirmationNotificationForEmailEnabled -ConfirmationNotificationMessage -ConfirmationNotificationTitle -DisableQuarantineReportingOption -DisableUserSubmissionOptions -EnableCustomizedMsg -EnableCustomNotificationSender -EnableOrganizationBranding -EnableReportToMicrosoft -EnableThirdPartyAddress -EnableUserEmailNotification -ErrorAction -ErrorVariable -Identity -JunkReviewResultMessage -MultiLanguagePostSubmitMessageButtonLinkForJunk -MultiLanguagePostSubmitMessageButtonLinkForPhishing -MultiLanguagePostSubmitMessageButtonTextForJunk -MultiLanguagePostSubmitMessageButtonTextForPhishing -MultiLanguagePostSubmitMessageForJunk -MultiLanguagePostSubmitMessageForPhishing -MultiLanguagePostSubmitMessageTitleForJunk -MultiLanguagePostSubmitMessageTitleForPhishing -MultiLanguagePreSubmitMessageButtonLinkForJunk -MultiLanguagePreSubmitMessageButtonLinkForNotJunk -MultiLanguagePreSubmitMessageButtonLinkForPhishing -MultiLanguagePreSubmitMessageButtonTextForJunk -MultiLanguagePreSubmitMessageButtonTextForNotJunk -MultiLanguagePreSubmitMessageButtonTextForPhishing -MultiLanguagePreSubmitMessageForJunk -MultiLanguagePreSubmitMessageForNotJunk -MultiLanguagePreSubmitMessageForPhishing -MultiLanguagePreSubmitMessageTitleForJunk -MultiLanguagePreSubmitMessageTitleForNotJunk -MultiLanguagePreSubmitMessageTitleForPhishing -MultiLanguageSetting -NotificationFooterMessage -NotificationSenderAddress -NotificationsForCleanSubmissionAirInvestigationsEnabled -NotificationsForPhishMalwareSubmissionAirInvestigationsEnabled -NotificationsForSpamSubmissionAirInvestigationsEnabled -NotificationsForSubmissionAirInvestigationsEnabled -NotJunkReviewResultMessage -OnlyShowPhishingDisclaimer -OutBuffer -OutVariable -PhishingReviewResultMessage -PostSubmitMessage -PostSubmitMessageEnabled -PostSubmitMessageForJunk -PostSubmitMessageForNotJunk -PostSubmitMessageForPhishing -PostSubmitMessageTitle -PostSubmitMessageTitleForJunk -PostSubmitMessageTitleForNotJunk -PostSubmitMessageTitleForPhishing -PreSubmitMessage -PreSubmitMessageEnabled -PreSubmitMessageForJunk -PreSubmitMessageForNotJunk -PreSubmitMessageForPhishing -PreSubmitMessageTitle -PreSubmitMessageTitleForJunk -PreSubmitMessageTitleForNotJunk -PreSubmitMessageTitleForPhishing -ReportChatMessageEnabled -ReportChatMessageToCustomizedAddressEnabled -ReportJunkAddresses -ReportJunkToCustomizedAddress -ReportNotJunkAddresses -ReportNotJunkToCustomizedAddress -ReportPhishAddresses -ReportPhishToCustomizedAddress -ThirdPartyReportAddresses -UserSubmissionOptions -UserSubmissionOptionsMessage -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MalwareFilterPolicy -Action -AdminDisplayName -Confirm -CustomAlertText -CustomExternalBody -CustomExternalSubject -CustomFromAddress -CustomFromName -CustomInternalBody -CustomInternalSubject -CustomNotifications -EnableExternalSenderAdminNotifications -EnableExternalSenderNotifications -EnableFileFilter -EnableInternalSenderAdminNotifications -EnableInternalSenderNotifications -ErrorAction -ErrorVariable -ExternalSenderAdminAddress -FileTypeAction -FileTypes -Identity -InternalSenderAdminAddress -IsPolicyOverrideApplied -MakeDefault -OutBuffer -OutVariable -QuarantineTag -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSubmissionPolicy -Confirm -ConfirmationNotificationEnabled -ConfirmationNotificationForChatMessageEnabled -ConfirmationNotificationForEmailEnabled -ConfirmationNotificationMessage -ConfirmationNotificationTitle -DisableQuarantineReportingOption -DisableUserSubmissionOptions -EnableCustomizedMsg -EnableCustomNotificationSender -EnableOrganizationBranding -EnableReportToMicrosoft -EnableThirdPartyAddress -EnableUserEmailNotification -ErrorAction -ErrorVariable -JunkReviewResultMessage -MultiLanguagePostSubmitMessageButtonLinkForJunk -MultiLanguagePostSubmitMessageButtonLinkForPhishing -MultiLanguagePostSubmitMessageButtonTextForJunk -MultiLanguagePostSubmitMessageButtonTextForPhishing -MultiLanguagePostSubmitMessageForJunk -MultiLanguagePostSubmitMessageForPhishing -MultiLanguagePostSubmitMessageTitleForJunk -MultiLanguagePostSubmitMessageTitleForPhishing -MultiLanguagePreSubmitMessageButtonLinkForJunk -MultiLanguagePreSubmitMessageButtonLinkForNotJunk -MultiLanguagePreSubmitMessageButtonLinkForPhishing -MultiLanguagePreSubmitMessageButtonTextForJunk -MultiLanguagePreSubmitMessageButtonTextForNotJunk -MultiLanguagePreSubmitMessageButtonTextForPhishing -MultiLanguagePreSubmitMessageForJunk -MultiLanguagePreSubmitMessageForNotJunk -MultiLanguagePreSubmitMessageForPhishing -MultiLanguagePreSubmitMessageTitleForJunk -MultiLanguagePreSubmitMessageTitleForNotJunk -MultiLanguagePreSubmitMessageTitleForPhishing -MultiLanguageSetting -NotificationFooterMessage -NotificationSenderAddress -NotificationsForCleanSubmissionAirInvestigationsEnabled -NotificationsForPhishMalwareSubmissionAirInvestigationsEnabled -NotificationsForSpamSubmissionAirInvestigationsEnabled -NotificationsForSubmissionAirInvestigationsEnabled -NotJunkReviewResultMessage -OnlyShowPhishingDisclaimer -OutBuffer -OutVariable -PhishingReviewResultMessage -PostSubmitMessage -PostSubmitMessageEnabled -PostSubmitMessageForJunk -PostSubmitMessageForNotJunk -PostSubmitMessageForPhishing -PostSubmitMessageTitle -PostSubmitMessageTitleForJunk -PostSubmitMessageTitleForNotJunk -PostSubmitMessageTitleForPhishing -PreSubmitMessage -PreSubmitMessageEnabled -PreSubmitMessageForJunk -PreSubmitMessageForNotJunk -PreSubmitMessageForPhishing -PreSubmitMessageTitle -PreSubmitMessageTitleForJunk -PreSubmitMessageTitleForNotJunk -PreSubmitMessageTitleForPhishing -ReportChatMessageEnabled -ReportChatMessageToCustomizedAddressEnabled -ReportJunkAddresses -ReportJunkToCustomizedAddress -ReportNotJunkAddresses -ReportNotJunkToCustomizedAddress -ReportPhishAddresses -ReportPhishToCustomizedAddress -ThirdPartyReportAddresses -UserSubmissionOptions -UserSubmissionOptionsMessage -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Release-QuarantineMessage -ActionType -AllowSender -Confirm -Delete -EntityType -ErrorAction -ErrorVariable -Force -Identities -Identity -OutBuffer -OutVariable -ReleaseToAll -ReportFalsePositive -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Preview-QuarantineMessage -EntityType -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantineMessageHeader -EntityType -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Export-QuarantineMessage -CompressOutput -Debug -DomainController -EntityType -ErrorAction -ErrorVariable -ForceConversionToMime -Identities -Identity -OutBuffer -OutVariable -Password -ReasonForExport -RecipientAddress -WarningAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ATPEvaluationRule -AntiPhishPolicy -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -OutBuffer -OutVariable -RecipientDomainIs -SafeAttachmentPolicy -SafeLinksPolicy -SentTo -SentToMemberOf -ShareWithMicrosoft -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MalwareFilterPolicy -Action -AdminDisplayName -Confirm -CustomAlertText -CustomExternalBody -CustomExternalSubject -CustomFromAddress -CustomFromName -CustomInternalBody -CustomInternalSubject -CustomNotifications -EnableExternalSenderAdminNotifications -EnableExternalSenderNotifications -EnableFileFilter -EnableInternalSenderAdminNotifications -EnableInternalSenderNotifications -ErrorAction -ErrorVariable -ExternalSenderAdminAddress -FileTypeAction -FileTypes -InternalSenderAdminAddress -Name -OutBuffer -OutVariable -QuarantineTag -RecommendedPolicyType -WarningAction -WarningVariable -WhatIf -ZapEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeLinksPolicy -AdminDisplayName -AllowClickThrough -Confirm -CustomNotificationText -DeliverMessageAfterScan -DisableUrlRewrite -DoNotRewriteUrls -EnableForInternalSenders -EnableOrganizationBranding -EnableSafeLinksForEmail -EnableSafeLinksForOffice -EnableSafeLinksForTeams -ErrorAction -ErrorVariable -LocalizedNotificationTextList -MakeBuiltInProtection -Name -OutBuffer -OutVariable -RecommendedPolicyType -ScanUrls -TrackClicks -UseTranslatedNotificationText -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeLinksPolicy -AdminDisplayName -AllowClickThrough -Confirm -CustomNotificationText -DeliverMessageAfterScan -DisableUrlRewrite -DoNotRewriteUrls -EnableForInternalSenders -EnableOrganizationBranding -EnableSafeLinksForEmail -EnableSafeLinksForOffice -EnableSafeLinksForTeams -ErrorAction -ErrorVariable -Identity -LocalizedNotificationTextList -OutBuffer -OutVariable -ScanUrls -TrackClicks -UseTranslatedNotificationText -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ArcConfig -ArcTrustedSealers -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ATPEvaluationRule -AntiPhishPolicy -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -RecipientDomainIs -SafeAttachmentPolicy -SafeLinksPolicy -SentTo -SentToMemberOf -ShareWithMicrosoft -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DkimSigningConfigSelectorCnames -DomainName", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ArcConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPEvaluationRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ATPEvaluationRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ATPEvaluationRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BlockedConnector -Confirm -ConnectorId -ErrorAction -ErrorVariable -Reason -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedConnector -ConnectorId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ATPBuiltInProtectionRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ATPBuiltInProtectionRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -SafeAttachmentPolicy -SafeLinksPolicy -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPBuiltInProtectionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeAttachmentPolicy -Action -ActionOnError -AdminDisplayName -Confirm -CustomNotificationText -Enable -EnableOrganizationBranding -ErrorAction -ErrorVariable -MakeBuiltInProtection -Name -OutBuffer -OutVariable -QuarantineTag -RecommendedPolicyType -Redirect -RedirectAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListItems -Allow -Block -Entry -ErrorAction -ErrorVariable -ExpirationDate -InformationAction -InformationVariable -ListSubType -ListType -NoExpiration -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListItems -Entries -ErrorAction -ErrorVariable -Ids -InformationAction -InformationVariable -ListSubType -ListType -OutBuffer -OutputJson -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-QuarantinePolicy -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-QuarantinePolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantinePolicyType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeAttachmentPolicy -Action -ActionOnError -AdminDisplayName -Confirm -CustomNotificationText -Enable -EnableOrganizationBranding -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -QuarantineTag -Redirect -RedirectAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EmailTenantSettings -Confirm -Debug -DomainController -EnablePriorityAccountProtection -ErrorAction -ErrorVariable -Identity -IgnoreDehydratedFlag -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EmailTenantSettings -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SendingInfrastructure -SpoofedUser -SpoofType -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -Ids -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-TenantAllowBlockListSpoofItems -ErrorAction -ErrorVariable -Identity -Ids -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantAllowBlockListSpoofItems -Action -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofIntelligenceInsight -AllowedToSpoof -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SpoofType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Sync-TenantAllowBlockListItems -ErrorAction -ErrorVariable -InformationAction -InformationVariable -ListType -OutBuffer -OutVariable -PipelineVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeLinksRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeLinksPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-SafeAttachmentRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeAttachmentPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSubmissionRule -Comments -Confirm -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -ReportSubmissionPolicy -SentTo -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MalwareFilterRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -MalwareFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedOutboundSpamFilterRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfFrom -ExceptIfFromMemberOf -ExceptIfSenderDomainIs -From -FromMemberOf -HostedOutboundSpamFilterPolicy -Identity -Name -OutBuffer -OutVariable -Priority -SenderDomainIs -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedOutboundSpamFilterPolicy -ActionWhenThresholdReached -AdminDisplayName -AutoForwardingMode -BccSuspiciousOutboundAdditionalRecipients -BccSuspiciousOutboundMail -BlockUnlistedDomains -Confirm -ErrorAction -ErrorVariable -Identity -NotifyOutboundSpam -NotifyOutboundSpamRecipients -OutBuffer -OutVariable -RecipientLimitExternalPerHour -RecipientLimitInternalPerHour -RecipientLimitPerDay -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedContentFilterRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -HostedContentFilterPolicy -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-HostedConnectionFilterPolicy -AdminDisplayName -ConfigurationXmlRaw -Confirm -EnableSafeList -ErrorAction -ErrorVariable -Identity -IPAllowList -IPBlockList -MakeDefault -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-EOPProtectionPolicyRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DkimSigningConfig -AdminDisplayName -BodyCanonicalization -Confirm -Enabled -ErrorAction -ErrorVariable -HeaderCanonicalization -Identity -KeySize -OutBuffer -OutVariable -PublishTxtRecords -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AntiSpoofingPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProtectMyDomain -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AntiPhishRule -AntiPhishPolicy -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ATPProtectionPolicyRule -Comments -Confirm -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Identity -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Rotate-DkimSigningConfig -Confirm -ErrorAction -ErrorVariable -Identity -KeySize -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeLinksRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeLinksPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeAttachmentRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SafeAttachmentPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ReportSubmissionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ReportSubmissionPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MalwareFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MalwareFilterPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedOutboundSpamFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedOutboundSpamFilterPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedContentFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedContentFilterPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-HostedConnectionFilterPolicy -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-EOPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-BlockedSenderAddress -Confirm -ErrorAction -ErrorVariable -Reason -SenderAddress -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AntiPhishRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AntiPhishPolicy -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ATPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeLinksRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeLinksPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-SafeAttachmentRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeAttachmentPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSubmissionRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -ReportSubmissionPolicy -SentTo -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MalwareFilterRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -MalwareFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedOutboundSpamFilterRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfFrom -ExceptIfFromMemberOf -ExceptIfSenderDomainIs -From -FromMemberOf -HostedOutboundSpamFilterPolicy -Name -OutBuffer -OutVariable -Priority -SenderDomainIs -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedOutboundSpamFilterPolicy -ActionWhenThresholdReached -AdminDisplayName -AutoForwardingMode -BccSuspiciousOutboundAdditionalRecipients -BccSuspiciousOutboundMail -Confirm -ErrorAction -ErrorVariable -Force -Name -NotifyOutboundSpam -NotifyOutboundSpamRecipients -OutBuffer -OutVariable -RecipientLimitExternalPerHour -RecipientLimitInternalPerHour -RecipientLimitPerDay -RecommendedPolicyType -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedContentFilterRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -HostedContentFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-HostedConnectionFilterPolicy -AdminDisplayName -ConfigurationXmlRaw -Confirm -EnableSafeList -ErrorAction -ErrorVariable -IPAllowList -IPBlockList -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-EOPProtectionPolicyRule -AntiPhishPolicy -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -HostedContentFilterPolicy -MalwareFilterPolicy -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DkimSigningConfig -AdminDisplayName -BodyCanonicalization -Confirm -DomainName -Enabled -ErrorAction -ErrorVariable -HeaderCanonicalization -KeySize -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-AntiPhishRule -AntiPhishPolicy -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ATPProtectionPolicyRule -Comments -Confirm -Enabled -ErrorAction -ErrorVariable -ExceptIfRecipientDomainIs -ExceptIfSentTo -ExceptIfSentToMemberOf -Name -OutBuffer -OutVariable -Priority -RecipientDomainIs -SafeAttachmentPolicy -SafeLinksPolicy -SentTo -SentToMemberOf -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeLinksPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SafeAttachmentPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSubmissionRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MalwareFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedOutboundSpamFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedContentFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HostedConnectionFilterPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EOPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DkimSigningConfig -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ConfigAnalyzerPolicyRecommendation -ErrorAction -ErrorVariable -Identity -IsAppliedToDisabled -OutBuffer -OutVariable -RecommendedPolicyType -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BlockedSenderAddress -SenderAddress", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AtpPolicyForO365 -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiSpoofingPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AntiPhishPolicy -Advanced -ErrorAction -ErrorVariable -Identity -Impersonation -OutBuffer -OutVariable -Spoof -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPProtectionPolicyRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -State -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SafeLinksRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-SafeAttachmentRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ReportSubmissionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-MalwareFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-HostedOutboundSpamFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-HostedContentFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-EOPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-AntiPhishRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ATPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SafeLinksRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-SafeAttachmentRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ReportSubmissionRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-MalwareFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-HostedOutboundSpamFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-HostedContentFilterRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-EOPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-AntiPhishRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Disable-ATPProtectionPolicyRule -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/d3a820ea-1fb6-44da-a918-512236ece994.json b/RoleDefinitions/d3a820ea-1fb6-44da-a918-512236ece994.json new file mode 100644 index 000000000..b4278839f --- /dev/null +++ b/RoleDefinitions/d3a820ea-1fb6-44da-a918-512236ece994.json @@ -0,0 +1,19 @@ +{ + "id": "d3a820ea-1fb6-44da-a918-512236ece994", + "description": "This role enables applications to impersonate users in an organization in order to perform tasks on behalf of the user.", + "displayName": "ApplicationImpersonation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Impersonate-ExchangeUser" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/d4553c34-1513-4bec-9fd7-02093462ae82.json b/RoleDefinitions/d4553c34-1513-4bec-9fd7-02093462ae82.json new file mode 100644 index 000000000..cc5ee2de5 --- /dev/null +++ b/RoleDefinitions/d4553c34-1513-4bec-9fd7-02093462ae82.json @@ -0,0 +1,28 @@ +{ + "id": "d4553c34-1513-4bec-9fd7-02093462ae82", + "description": "This role enables individual users to view and modify their membership in distribution groups in an organization, provided that those distribution groups allow manipulation of group membership.", + "displayName": "MyDistributionGroupMembership", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -ManagedBy -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -Properties -PropertySet -ResultSize -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OutBuffer -OutVariable -Properties -PropertySet -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Group -Anr -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -ErrorAction -ErrorVariable -Identity -IncludeSoftDeletedObjects -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-DistributionGroupMember -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/de410276-6265-4935-8f5b-60490bcc2dd0.json b/RoleDefinitions/de410276-6265-4935-8f5b-60490bcc2dd0.json new file mode 100644 index 000000000..a145e7ef8 --- /dev/null +++ b/RoleDefinitions/de410276-6265-4935-8f5b-60490bcc2dd0.json @@ -0,0 +1,29 @@ +{ + "id": "de410276-6265-4935-8f5b-60490bcc2dd0", + "description": "This role enables administrators to manage MailTips in an organization.", + "displayName": "Mail Tips", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AvailabilityConfig -AllowedTenantIds -Confirm -ErrorAction -ErrorVariable -OrgWideAccount -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-AvailabilityAddressSpace -AccessMethod -Confirm -Credentials -ErrorAction -ErrorVariable -ForestName -OutBuffer -OutVariable -TargetAutodiscoverEpr -TargetServiceEpr -TargetTenantId -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationRelationship -Identity -MailTipsAccessEnabled -MailTipsAccessLevel -MailTipsAccessScope", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -Confirm -ErrorAction -ErrorVariable -MailTipsAllTipsEnabled -MailTipsExternalRecipientsTipsEnabled -MailTipsGroupMetricsEnabled -MailTipsLargeAudienceThreshold -MailTipsMailboxSourcedTipsEnabled -OutBuffer -OutVariable -PublicComputersDetectionEnabled -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-IntraOrganizationConnector -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-AvailabilityAddressSpace -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OrganizationRelationship -DomainNames -MailTipsAccessEnabled -MailTipsAccessLevel -MailTipsAccessScope -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-IntraOrganizationConnector -Name -TargetAddressDomains", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AvailabilityAddressSpace -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/dea4e508-91d4-427f-b2dc-8101b49b8ddc.json b/RoleDefinitions/dea4e508-91d4-427f-b2dc-8101b49b8ddc.json new file mode 100644 index 000000000..972c6bd32 --- /dev/null +++ b/RoleDefinitions/dea4e508-91d4-427f-b2dc-8101b49b8ddc.json @@ -0,0 +1,41 @@ +{ + "id": "dea4e508-91d4-427f-b2dc-8101b49b8ddc", + "description": "This role enables administrators to manage remote and accepted domains in an organization.", + "displayName": "Remote and Accepted Domains", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-RemoteDomain -AllowedOOFType -AutoForwardEnabled -AutoReplyEnabled -ByteEncoderTypeFor7BitCharsets -CharacterSet -Confirm -ContentType -DeliveryReportEnabled -DisplaySenderName -ErrorAction -ErrorVariable -Identity -IsInternal -LineWrapSize -MeetingForwardNotificationEnabled -Name -NDRDiagnosticInfoEnabled -NDREnabled -NonMimeCharacterSet -OutBuffer -OutVariable -PreferredInternetCodePageForShiftJis -RequiredCharsetCoverage -TargetDeliveryDomain -TNEFEnabled -TrustedMailInboundEnabled -TrustedMailOutboundEnabled -UseSimpleDisplayName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-AcceptedDomain -CanHaveCloudCache -Confirm -DomainType -EnableNego2Authentication -Identity -MailFlowRegion -MatchSubDomains -OutboundOnly -SendingFromDomainDisabled -SendingToDomainDisabled -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-InboundConnector -AssociatedAcceptedDomains -ClientHostNames -CloudServicesMailEnabled -Comment -Confirm -ConnectorSource -ConnectorType -EFSkipIPs -EFSkipLastIP -EFSkipMailGateway -EFTestMode -EFUsers -Enabled -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -RequireTls -RestrictDomainsToCertificate -RestrictDomainsToIPAddresses -ScanAndDropRecipients -SenderDomains -SenderIPAddresses -TlsSenderCertificateName -TreatMessagesAsInternal -TrustedOrganizations -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-InboundConnector -AssociatedAcceptedDomains -ClientHostNames -CloudServicesMailEnabled -Comment -Confirm -ConnectorSource -ConnectorType -EFSkipIPs -EFSkipLastIP -EFSkipMailGateway -EFTestMode -EFUsers -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -RequireTls -RestrictDomainsToCertificate -RestrictDomainsToIPAddresses -ScanAndDropRecipients -SenderDomains -SenderIPAddresses -TlsSenderCertificateName -TreatMessagesAsInternal -TrustedOrganizations -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RemoteDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OutboundConnector -ErrorAction -ErrorVariable -Identity -IncludeTestModeConnectors -IsTransportRuleScoped -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InboundConnector -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AcceptedDomain -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OutboundConnector -AllAcceptedDomains -CloudServicesMailEnabled -Comment -Confirm -ConnectorSource -ConnectorType -Enabled -ErrorAction -ErrorVariable -Identity -IsTransportRuleScoped -IsValidated -LastValidationTimestamp -Name -OutBuffer -OutVariable -RecipientDomains -RouteAllMessagesViaOnPremises -SenderRewritingEnabled -SmartHosts -TestMode -TlsDomain -TlsSettings -UseMXRecord -ValidationRecipients -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OutboundConnector -AllAcceptedDomains -CloudServicesMailEnabled -Comment -Confirm -ConnectorSource -ConnectorType -Enabled -ErrorAction -ErrorVariable -IsTransportRuleScoped -LinkForModifiedConnector -Name -OutBuffer -OutVariable -RecipientDomains -RouteAllMessagesViaOnPremises -SenderRewritingEnabled -SmartHosts -TestMode -TlsDomain -TlsSettings -UseMXRecord -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Validate-OutboundConnector -AsJob -Confirm -Debug -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Recipients -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -ByteEncoderTypeFor7BitCharsets -PreferredInternetCodePageForShiftJis -RequiredCharsetCoverage", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OnPremisesOrganization -Comment -Confirm -ErrorAction -ErrorVariable -HybridDomains -Identity -InboundConnector -OrganizationName -OrganizationRelationship -OutboundConnector -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-RemoteDomain -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OutboundConnector -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-OnPremisesOrganization -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-InboundConnector -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-RemoteDomain -Confirm -DomainName -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-OnPremisesOrganization -Comment -Confirm -ErrorAction -ErrorVariable -HybridDomains -InboundConnector -Name -OrganizationGuid -OrganizationName -OrganizationRelationship -OutboundConnector -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -AuthenticationType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OnPremisesOrganization -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-IntraOrganizationConfiguration -OrganizationGuid" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/dfea4ae0-060c-4334-965b-976155be1c20.json b/RoleDefinitions/dfea4ae0-060c-4334-965b-976155be1c20.json new file mode 100644 index 000000000..1327d53c9 --- /dev/null +++ b/RoleDefinitions/dfea4ae0-060c-4334-965b-976155be1c20.json @@ -0,0 +1,19 @@ +{ + "id": "dfea4ae0-060c-4334-965b-976155be1c20", + "description": "This role allows partner applications to archive items.", + "displayName": "ArchiveApplication", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "UpdateItemInRecoverableItems" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8.json b/RoleDefinitions/e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8.json index 5ebe0590c..d0fa460b8 100644 --- a/RoleDefinitions/e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8.json +++ b/RoleDefinitions/e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8.json @@ -39,6 +39,7 @@ "microsoft.directory/groups/members/update", "microsoft.directory/groups/owners/update", "microsoft.directory/groups/restore", + "microsoft.directory/groups.unified/assignedLabels/update", "microsoft.directory/oAuth2PermissionGrants/allProperties/allTasks", "microsoft.directory/organization/basic/update", "microsoft.directory/roleAssignments/allProperties/allTasks", diff --git a/RoleDefinitions/e1369c9d-475a-4a56-95fd-30e548fc0df3.json b/RoleDefinitions/e1369c9d-475a-4a56-95fd-30e548fc0df3.json new file mode 100644 index 000000000..424ecd5b8 --- /dev/null +++ b/RoleDefinitions/e1369c9d-475a-4a56-95fd-30e548fc0df3.json @@ -0,0 +1,82 @@ +{ + "id": "e1369c9d-475a-4a56-95fd-30e548fc0df3", + "description": "This role enables administrators to search the content of one or more mailboxes in an organization.", + "displayName": "Mailbox Search", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -GroupMailbox -Identity -InactiveMailboxOnly -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeEmailAddressDisplayNames -IncludeForwardingAddressWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeInactiveMailbox -MailboxPlan -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "StartSearchSession", + "SetShardRelevancyData", + "SearchMailboxes", + "PostGroupItem", + "PerformInstantSearch", + "GetWacAttachmentInfo", + "GetUserUnifiedGroup", + "GetUnifiedGroupUnseenCount", + "GetShardRelevancyScore", + "GetShardRelevancyData", + "GetSearchableMailboxes", + "GetSearchSuggestions", + "GetSearchResults", + "GetNonIndexableItemStatistics", + "GetNonIndexableItemDetails", + "GetItem", + "GetFolder", + "GetFileAttachment", + "GetDiscoverySearchConfiguration", + "GetAttachmentThumbnail", + "GetAttachment", + "GetAllAttachmentsAsZip", + "FindMailboxStatisticsByKeywords", + "FindItem", + "FindFolder", + "ExportItems", + "ExecuteSearch", + "EndSearchSession", + "EndInstantSearchSession", + "DeleteSearchSuggestion", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-MailboxSearch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Stop-ComplianceSearch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-MailboxSearch -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Resume -StatisticsStartIndex -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-ComplianceSearch -Confirm -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -RetryOnError -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Notification -Confirm -ErrorAction -ErrorVariable -Identity -NotificationEmails -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-MailboxSearch -AllPublicFolderSources -AllSourceMailboxes -Confirm -Description -EndDate -ErrorAction -ErrorVariable -EstimateOnly -ExcludeDuplicateMessages -Force -Identity -IncludeKeywordStatistics -IncludeUnsearchableItems -Language -LogLevel -MessageTypes -Name -OutBuffer -OutVariable -PublicFolderSources -Recipients -SearchQuery -Senders -SourceMailboxes -StartDate -StatisticsStartIndex -StatusMailRecipients -TargetMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ComplianceSearchAction -ChangeExportKey -Confirm -ErrorAction -ErrorVariable -Identity -LogLevel -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ComplianceSearch -AddExchangeLocation -AddExchangeLocationExclusion -AddOneDriveLocation -AddOneDriveLocationExclusion -AddPublicFolderLocation -AddPublicFolderLocationExclusion -AddSharePointLocation -AddSharePointLocationExclusion -AllowNotFoundExchangeLocationsEnabled -Confirm -ContentDateFrom -ContentDateTo -ContentMatchQuery -Description -ErrorAction -ErrorVariable -ExchangeLocation -ExchangeLocationExclusion -Force -Identity -IncludeUnindexedItemsEnabled -Language -LogLevel -Name -OneDriveLocation -OneDriveLocationExclusion -OutBuffer -OutVariable -PublicFolderLocation -PublicFolderLocationExclusion -RefinerNames -RemoveExchangeLocation -RemoveExchangeLocationExclusion -RemoveOneDriveLocation -RemoveOneDriveLocationExclusion -RemovePublicFolderLocation -RemovePublicFolderLocationExclusion -RemoveSharePointLocation -RemoveSharePointLocationExclusion -SharePointLocation -SharePointLocationExclusion -StatusMailRecipients -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-Mailbox -Confirm -DoNotIncludeArchive -ErrorAction -ErrorVariable -EstimateResultOnly -Force -Identity -IncludeUnsearchableItems -LogLevel -LogOnly -OutBuffer -OutVariable -SearchDumpster -SearchDumpsterOnly -SearchQuery -TargetFolder -TargetMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxSearch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-ComplianceSearch -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-MailboxSearch -AllPublicFolderSources -AllSourceMailboxes -Confirm -Description -EndDate -ErrorAction -ErrorVariable -EstimateOnly -ExcludeDuplicateMessages -Force -IncludeKeywordStatistics -IncludeUnsearchableItems -Language -LogLevel -MessageTypes -Name -OutBuffer -OutVariable -PublicFolderSources -Recipients -SearchQuery -Senders -SourceMailboxes -StartDate -StatusMailRecipients -TargetMailbox -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ComplianceSearchAction -ActionName -ArchiveFormat -Confirm -ErrorAction -ErrorVariable -ExchangeArchiveFormat -Export -FileTypeExclusionsForUnindexedItems -Force -Format -IncludeCredential -JobOptions -MaxUnindexedSize -NotifyEmail -NotifyEmailCC -OutBuffer -OutVariable -Preview -Purge -PurgeType -ReferenceActionName -Region -Report -RetentionReport -RetryOnError -Scenario -Scope -ScopeDetails -SearchName -SharePointArchiveFormat -V2Results -Version -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ComplianceSearch -AllowNotFoundExchangeLocationsEnabled -Confirm -ContentDateFrom -ContentDateTo -ContentMatchQuery -Description -ErrorAction -ErrorVariable -ExchangeLocation -ExchangeLocationExclusion -Force -IncludeUnindexedItemsEnabled -Language -LogLevel -Name -OneDriveLocation -OneDriveLocationExclusion -OutBuffer -OutVariable -PublicFolderLocation -PublicFolderLocationExclusion -RefinerNames -SharePointLocation -SharePointLocationExclusion -StatusMailRecipients -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Invoke-ComplianceSearchActionStep -Identity -Parameters -Step", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TeamChat -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -StartIndex -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolder -ErrorAction -ErrorVariable -GetChildren -Identity -LostAndFound -Mailbox -OutBuffer -OutVariable -Recurse -ResidentFolders -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Notification -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ProcessType -ResultSize -StartDate -Summary -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxSearch -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -ShowDeletionInProgressSearches -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxFolderPermission -GroupMailbox", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceSearchAction -Details -ErrorAction -ErrorVariable -Export -Identity -IncludeCredential -OutBuffer -OutVariable -Preview -Purge -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ComplianceSearch -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/e17e9880-4672-4aa0-8304-be93de63fdf9.json b/RoleDefinitions/e17e9880-4672-4aa0-8304-be93de63fdf9.json new file mode 100644 index 000000000..9d0ab331c --- /dev/null +++ b/RoleDefinitions/e17e9880-4672-4aa0-8304-be93de63fdf9.json @@ -0,0 +1,30 @@ +{ + "id": "e17e9880-4672-4aa0-8304-be93de63fdf9", + "description": "This role enables individual users to view and modify their e-mail subscription settings such as message format and protocol defaults.", + "displayName": "MyMailSubscriptions", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TenantScanRequestStatistics -IncludeReport", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAnalysisRequestStatistics -CSVData -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeAnalysisResult -IncludeFolderDetails -IncludeMappingResult -IncludeReport -ItemsStartTime -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-MailboxAnalysisRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailboxAnalysisRequest -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -Name -OutBuffer -OutVariable -ResultSize -SyncProtocol -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncRequestStatistics -DiagnosticInfo -DiagnosticOnly -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -IncludeSlaReport -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-SyncRequest -Confirm -ErrorAction -ErrorVariable -Force -Identity -Mailbox -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf -Xrm", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SyncRequest -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -Name -OutBuffer -OutVariable -ResultSize -SyncProtocol -WarningAction -WarningVariable -WhatIf -WorkloadType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/e53e3bb4-3fa1-4edc-a1c3-030371b7e861.json b/RoleDefinitions/e53e3bb4-3fa1-4edc-a1c3-030371b7e861.json new file mode 100644 index 000000000..bc4394578 --- /dev/null +++ b/RoleDefinitions/e53e3bb4-3fa1-4edc-a1c3-030371b7e861.json @@ -0,0 +1,19 @@ +{ + "id": "e53e3bb4-3fa1-4edc-a1c3-030371b7e861", + "description": "This role will allow users to install apps with ReadWriteMailbox permissions.", + "displayName": "My ReadWriteMailbox Apps", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -AllowReadWriteMailbox" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/e86f0f69-88a4-4cb5-8950-618a891fce82.json b/RoleDefinitions/e86f0f69-88a4-4cb5-8950-618a891fce82.json new file mode 100644 index 000000000..ba036d1b6 --- /dev/null +++ b/RoleDefinitions/e86f0f69-88a4-4cb5-8950-618a891fce82.json @@ -0,0 +1,21 @@ +{ + "id": "e86f0f69-88a4-4cb5-8950-618a891fce82", + "description": "This role enables administrators to create and manage custom Unified Messaging voice prompts in an organization.", + "displayName": "UM Prompts", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMDialPlan -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UMAutoAttendant -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -UMDialPlan -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/e9619b40-eb0e-40a1-b3b6-585646a51f2f.json b/RoleDefinitions/e9619b40-eb0e-40a1-b3b6-585646a51f2f.json new file mode 100644 index 000000000..80450190a --- /dev/null +++ b/RoleDefinitions/e9619b40-eb0e-40a1-b3b6-585646a51f2f.json @@ -0,0 +1,43 @@ +{ + "id": "e9619b40-eb0e-40a1-b3b6-585646a51f2f", + "description": "This role enables administrators to create and manage universal security groups and their memberships in an organization. \r\nIf your organization maintains a split permissions model where USG creation and management is performed by a different group other than those who manage Exchange servers, assign this role to that group.", + "displayName": "Security Group Creation and Membership", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroup -Anr -Credential -ErrorAction -ErrorVariable -Filter -Identity -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeBypassModerationFromSendersOrMembersWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeModeratedByWithDisplayNames -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EligibleDistributionGroupForMigration -ErrorAction -ErrorVariable -Identity -ManagedBy -OrganizationalUnit -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -Process", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-DistributionGroup -Alias -BypassNestedModerationEnabled -Confirm -CopyOwnerToMember -Description -DisplayName -ErrorAction -ErrorVariable -ManagedBy -MemberDepartRestriction -MemberJoinRestriction -Members -ModeratedBy -ModerationEnabled -Name -Notes -OrganizationalUnit -OutBuffer -OutVariable -PrimarySmtpAddress -RequireSenderAuthenticationEnabled -RoomList -SendModerationNotifications -Type -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DynamicDistributionGroupMember -Identity -IncludeSoftDeletedObjects", + "(Microsoft.Exchange.Management.PowerShell.E2010) Write-AdminAuditLog -Comment -Confirm -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-DistributionGroupMember -BypassSecurityGroupManagerCheck -Identity -Members", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Group -BypassSecurityGroupManagerCheck -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-DistributionGroup -BypassSecurityGroupManagerCheck -Identity -RoomList", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroupMember -BypassSecurityGroupManagerCheck -Identity -Member", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-DistributionGroup -BypassSecurityGroupManagerCheck -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SweepRule -BypassScopeCheck", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -BookmarkDisplayName -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OrganizationalUnit -ErrorAction -ErrorVariable -Identity -IncludeContainers -OutBuffer -OutVariable -ResultSize -SearchText -SingleNodeOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -ErrorAction -ErrorVariable -Filter -Identity -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DistributionGroupMember -Identity -IncludeSoftDeletedObjects", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-DistributionGroupMember -BypassSecurityGroupManagerCheck -Identity -Member" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/e9a9f614-7527-44e2-a61a-1879747ccfd7.json b/RoleDefinitions/e9a9f614-7527-44e2-a61a-1879747ccfd7.json new file mode 100644 index 000000000..1c1bb131c --- /dev/null +++ b/RoleDefinitions/e9a9f614-7527-44e2-a61a-1879747ccfd7.json @@ -0,0 +1,29 @@ +{ + "id": "e9a9f614-7527-44e2-a61a-1879747ccfd7", + "displayName": "Endpoint Privilege Manager", + "description": "Endpoint Privilege Managers can manage Endpoint Privilege Management (EPM) policies in the Intune console.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "e9a9f614-7527-44e2-a61a-1879747ccfd7", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/EpmPolicy/Create", + "Microsoft.Intune/EpmPolicy/Read", + "Microsoft.Intune/EpmPolicy/Update", + "Microsoft.Intune/EpmPolicy/Delete", + "Microsoft.Intune/EpmPolicy/Assign", + "Microsoft.Intune/EpmPolicy/ViewElevationRequests", + "Microsoft.Intune/EpmPolicy/ModifyElevationRequests", + "Microsoft.Intune/EpmPolicy/ViewReports", + "Microsoft.Intune/ManagedDevices/Read" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/ea5480d0-51c6-4b3c-bd99-565cd9738595.json b/RoleDefinitions/ea5480d0-51c6-4b3c-bd99-565cd9738595.json new file mode 100644 index 000000000..6c71b0a7d --- /dev/null +++ b/RoleDefinitions/ea5480d0-51c6-4b3c-bd99-565cd9738595.json @@ -0,0 +1,20 @@ +{ + "id": "ea5480d0-51c6-4b3c-bd99-565cd9738595", + "description": "This role will allow users to view and modify their marketplace apps.", + "displayName": "My Marketplace Apps", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "GetAppMarketplaceUrl", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -DownloadOnly -Etoken -MarketplaceAssetID -MarketplaceCorrelationID -MarketplaceQueryMarket -MarketplaceServicesUrl -MarketplaceUserProfileType" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/ebe91238-184d-4565-9c45-a795aef54011.json b/RoleDefinitions/ebe91238-184d-4565-9c45-a795aef54011.json new file mode 100644 index 000000000..97e6e77bc --- /dev/null +++ b/RoleDefinitions/ebe91238-184d-4565-9c45-a795aef54011.json @@ -0,0 +1,25 @@ +{ + "id": "ebe91238-184d-4565-9c45-a795aef54011", + "description": "This role enables individual users to modify their name.", + "displayName": "MyProfileInformation", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -DisplayName -FirstName -Identity -Initials -LastName -Notes -SimpleDisplayName", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -DisplayName -Identity -SimpleDisplayName", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Identity" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/eccc6e22-0006-445a-bef9-055b652fe3a9.json b/RoleDefinitions/eccc6e22-0006-445a-bef9-055b652fe3a9.json new file mode 100644 index 000000000..da91365ee --- /dev/null +++ b/RoleDefinitions/eccc6e22-0006-445a-bef9-055b652fe3a9.json @@ -0,0 +1,20 @@ +{ + "id": "eccc6e22-0006-445a-bef9-055b652fe3a9", + "description": "Allows the app to create, read, update, and delete email in all mailboxes as well as send mail as any user without a signed-in user", + "displayName": "Application Mail Full Access", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "servicePrincipal", + "rolePermissions": [ + { + "allowedResourceActions": [ + "Mail.Send", + "Mail.ReadWrite" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/ed764b00-64bc-4019-ae92-e219395781de.json b/RoleDefinitions/ed764b00-64bc-4019-ae92-e219395781de.json new file mode 100644 index 000000000..7e4bbbba8 --- /dev/null +++ b/RoleDefinitions/ed764b00-64bc-4019-ae92-e219395781de.json @@ -0,0 +1,21 @@ +{ + "id": "ed764b00-64bc-4019-ae92-e219395781de", + "description": null, + "displayName": "Information Protection Analyst", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ServiceDomainGroupStorage -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Enable-ServiceDomainGroupStorage -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Search-UnifiedAuditLog -Debug -EndDate -ErrorAction -ErrorVariable -Formatted -FreeText -HighCompleteness -IPAddresses -LongerRetentionEnabled -ObjectIds -Operations -OutBuffer -OutVariable -RecordType -ResultSize -SessionCommand -SessionId -SiteIds -StartDate -UserIds -Verbose -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/ee332575-ace6-46dd-955c-8dc1fd58db72.json b/RoleDefinitions/ee332575-ace6-46dd-955c-8dc1fd58db72.json new file mode 100644 index 000000000..0b1636c85 --- /dev/null +++ b/RoleDefinitions/ee332575-ace6-46dd-955c-8dc1fd58db72.json @@ -0,0 +1,91 @@ +{ + "id": "ee332575-ace6-46dd-955c-8dc1fd58db72", + "description": "Lets people view and edit settings and reports for compliance features.", + "displayName": "Compliance Admin", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-M365DataAtRestEncryptionPolicy -AvailabilityKeyAzureKeyID -AvailabilityKeyBlob -AzureKeyIDs -Confirm -Debug -Description -DomainController -Enabled -ErrorAction -ErrorVariable -Force -Identity -Name -OutBuffer -OutVariable -PermanentDataPurgeContact -PermanentDataPurgeReason -PermanentDataPurgeRequested -Refresh -Replace -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficATPReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -NumberOfRows -OutBuffer -OutVariable -Page -PageSize -PivotBy -ProbeTag -StartDate -SummarizeBy -ThreatClassification -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetailV2 -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceV2 -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -ProbeTag -RecipientAddress -ResultSize -SenderAddress -StartDate -StartingRecipientAddress -Status -Subject -SubjectFilterType -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-TDPReport -EndDate -ErrorAction -ErrorVariable -HVEAccountAddress -OutBuffer -OutVariable -ProbeTag -ReportType -ResultSize -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -Anr -Archive -ErrorAction -ErrorVariable -Filter -Identity -InactiveMailboxOnly -IncludeAcceptMessagesOnlyFromDLMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromSendersOrMembersWithDisplayNames -IncludeAcceptMessagesOnlyFromWithDisplayNames -IncludeEmailAddressDisplayNames -IncludeForwardingAddressWithDisplayNames -IncludeGrantSendOnBehalfToWithDisplayNames -IncludeInactiveMailbox -MailboxPlan -Migration -OrganizationalUnit -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -SoftDeletedMailbox -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeRulePackage -Capability -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-DatabaseEvent -AssistantName -Counter -DomainController -Process -RestItemFilter", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeEntities -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -Scenario -ScopeIds -ScopeRecipientType -SortBy -Workload", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -Identity -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleID -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-ReportSchedule -Direction -DlpRuleId -EncryptionTemplate -EncryptionType -ErrorAction -ErrorVariable -ExpiryDate -Locale -NotificationEmail -OutBuffer -OutVariable -RecipientAddress -ReportFrequency -ReportType -ScheduleName -SenderAddress -StartDate -TransportRuleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomDlpEmailTemplates -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JitConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OcrConfiguration -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-MailboxAssistant -AssistantName -DomainController -Process -SoftDeletedMailbox", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -Filter -Identity -OrganizationalUnit -Properties -PropertySet -ResultSize -ScopeIds -SortBy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficEncryptionReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-M365DataAtRestEncryptionPolicy -AvailabilityKeyAzureKeyID -AvailabilityKeyBlob -AvailabilityKeyResourceGroupName -AvailabilityKeySubscriptionID -AzureKeyIDs -Confirm -Debug -Description -DomainController -Enabled -ErrorAction -ErrorVariable -Name -OutBuffer -OutVariable -ResourceGroupNames -SubscriptionIDs -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReportSeries -AggregateBy -Domain -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-User -Identity -VIP", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-TextExtraction -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -FileData -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Test-M365DataAtRestEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -ComplianceMLBgdCrawlEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-M365DataAtRestEncryptionPolicyAssignment -DataEncryptionPolicy -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewRule -ErrorAction -Identity -Policy", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -Reviewers -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyV2 -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewPolicyReport -EndDate -ErrorAction -Identity -Page -PageSize -Policies -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SupervisoryReviewActivity -EndDate -ErrorAction -PolicyId -StartDate", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SubmissionCategoryReport -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SpoofMailReport -Action -Direction -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityReport -AggregateBy -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-SensitivityLabelActivityDetailsReport -EndDate -ErrorAction -ErrorVariable -MIPLabelName -OutBuffer -OutVariable -Page -PageSize -ProbeTag -Sender -Source -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicyTag -ErrorAction -ErrorVariable -Identity -IncludeSystemTags -Mailbox -OptionalInMailbox -OutBuffer -OutVariable -Types -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RetentionPolicy -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportScheduleList -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportSchedule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ReportExecutionInstance -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ScheduleId -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Recipient -Anr -AuthenticationType -BookmarkDisplayName -Capabilities -ErrorAction -ErrorVariable -Filter -Identity -IncludeBookmarkObject -IncludeSoftDeletedRecipients -OrganizationalUnit -OutBuffer -OutVariable -Properties -PropertySet -RecipientPreviewFilter -RecipientType -RecipientTypeDetails -ResultSize -SortBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-RMSTemplate -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -ResultSize -TrustedPublishingDomain -Type -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PolicyConfig -ErrorAction", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEMessageStatus -MessageId", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-OMEConfiguration -Debug -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceDetail -Action -EndDate -ErrorAction -ErrorVariable -Event -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTrace -EndDate -ErrorAction -ErrorVariable -FromIP -MessageId -MessageTraceId -OutBuffer -OutVariable -Page -PageSize -ProbeTag -RecipientAddress -SenderAddress -StartDate -Status -ToIP -UseRest -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficTopReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficSummaryReport -Category -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficReport -Action -AggregateBy -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailTrafficPolicyReport -Action -AggregateBy -Direction -DlpPolicy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -TransportRule -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailFlowStatusReport -Direction -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MailDetailEvaluationModeReport -ErrorAction -ErrorVariable -OutBuffer -OutVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-M365DataAtRestEncryptionPolicyAssignment -Debug -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-M365DataAtRestEncryptionPolicy -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-JournalRule -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportSummary -Action -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-InformationBarrierReportDetails -Action -AggregateBy -EndDate -ErrorAction -ErrorVariable -EventType -InformationBarrierPolicy -InitiatingUser -OutBuffer -OutVariable -Page -PageSize -Result -Source -StartDate -TargetUsers -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-HistoricalSearch -ErrorAction -ErrorVariable -JobId -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-EvaluationModeReport -AggregateBy -Direction -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -ProbeTag -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpSensitiveInformationTypeConfig -ErrorAction -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpKeywordDictionary -Name", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpIncidentDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetectionsReport -Action -AggregateBy -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -SummarizeBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DlpDetailReport -Action -Actor -DlpCompliancePolicy -DlpComplianceRule -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -Source -StartDate -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataRetentionReport -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-DataClassificationConfig -ErrorAction -ErrorVariable -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CustomizedUserSubmission -AggregateBy -Debug -EndDate -ErrorAction -ErrorVariable -OutBuffer -OutVariable -Page -PageSize -StartDate -SubmissionNetworkMessageId -SubmittedBy -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-CompliancePolicyFileSyncNotification -Debug -DomainController -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentReport -Action -AggregateBy -Domain -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-AdvancedThreatProtectionDocumentDetail -Action -EventType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ATPTotalTrafficReport -Action -AggregateBy -Direction -Domain -DurationDays -EndDate -ErrorAction -ErrorVariable -EventType -OutBuffer -OutVariable -Page -PageSize -ProbeTag -StartDate -SummarizeBy -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/f28a1f50-f6e7-4571-818b-6a12f2af6b6c.json b/RoleDefinitions/f28a1f50-f6e7-4571-818b-6a12f2af6b6c.json index 1060c6683..211e9c70f 100644 --- a/RoleDefinitions/f28a1f50-f6e7-4571-818b-6a12f2af6b6c.json +++ b/RoleDefinitions/f28a1f50-f6e7-4571-818b-6a12f2af6b6c.json @@ -29,6 +29,7 @@ "microsoft.backup/userDriveProtectionUnits/allProperties/allTasks", "microsoft.backup/userDriveRestoreArtifacts/allProperties/allTasks", "microsoft.directory/groups/hiddenMembers/read", + "microsoft.directory/groups.unified/assignedLabels/update", "microsoft.directory/groups.unified/basic/update", "microsoft.directory/groups.unified/create", "microsoft.directory/groups.unified/delete", diff --git a/RoleDefinitions/f28fd594-8866-46fa-965d-3ba65b785741.json b/RoleDefinitions/f28fd594-8866-46fa-965d-3ba65b785741.json new file mode 100644 index 000000000..42d4db5b6 --- /dev/null +++ b/RoleDefinitions/f28fd594-8866-46fa-965d-3ba65b785741.json @@ -0,0 +1,20 @@ +{ + "id": "f28fd594-8866-46fa-965d-3ba65b785741", + "description": "This role will allow users to view and modify their custom apps.", + "displayName": "My Custom Apps", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "InstallApp", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-App -FileData -FileStream -Url" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/f41a84dc-faaf-4b63-b8c7-37d6eb818da2.json b/RoleDefinitions/f41a84dc-faaf-4b63-b8c7-37d6eb818da2.json new file mode 100644 index 000000000..b35fc9d74 --- /dev/null +++ b/RoleDefinitions/f41a84dc-faaf-4b63-b8c7-37d6eb818da2.json @@ -0,0 +1,22 @@ +{ + "id": "f41a84dc-faaf-4b63-b8c7-37d6eb818da2", + "description": null, + "displayName": "TenantPlacesManagement", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Place -AudioDeviceName -Building -Capacity -City -CountryOrRegion -DisplayDeviceName -ErrorAction -ErrorVariable -Floor -FloorLabel -GeoCoordinates -Identity -IsWheelChairAccessible -Label -MTREnabled -ParentId -Phone -PostalCode -State -Street -Tags -VideoDeviceName -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PlacesSettings -AllowInConnectionsList -PlacesEnabled", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PlacesSettings -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Place -ErrorAction -ErrorVariable -Identity -ResultSize -Type -WarningAction -WarningVariable" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/f7503168-e0cb-475b-94bb-00ee667b1da9.json b/RoleDefinitions/f7503168-e0cb-475b-94bb-00ee667b1da9.json new file mode 100644 index 000000000..b40d34280 --- /dev/null +++ b/RoleDefinitions/f7503168-e0cb-475b-94bb-00ee667b1da9.json @@ -0,0 +1,50 @@ +{ + "id": "f7503168-e0cb-475b-94bb-00ee667b1da9", + "description": "This role enables administrators to manage public folders in an organization. \r\nThis role doesn't enable you to manage whether public folders are mail-enabled. To mail-enable or disable a public folder, you must be assigned a role associated with the MailEnabledPublicFolders role type.", + "displayName": "Public Folders", + "isEnabled": true, + "version": "0.12 (14.0.451.0)", + "isBuiltIn": true, + "templateId": null, + "allowedPrincipalTypes": "user,group", + "rolePermissions": [ + { + "allowedResourceActions": [ + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-MessageTraceCopilot -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PublicFolderMoveRequest -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -RequestGuid -RequestQueue -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PublicFolderMoveRequest -AcceptLargeDataLoss -AllowLargeItems -BadItemLimit -CompletedRequestAgeLimit -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Folders -InternalFlags -Name -Organization -OutBuffer -OutVariable -Priority -RequestExpiryInterval -Suspend -SuspendComment -TargetMailbox -Verbose -WarningAction -WarningVariable -WhatIf -WorkloadType", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMoveRequestStatistics -Debug -DiagnosticInfo -DomainController -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ReportOnly -RequestGuid -RequestQueue -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMoveRequest -AccountPartition -BatchName -Debug -DomainController -ErrorAction -ErrorVariable -HighPriority -Identity -Name -Organization -OutBuffer -OutVariable -RequestQueue -ResultSize -Status -Suspend -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-BookingMailbox -RecipientTypeDetails -ResultSize", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderItemStatistics -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderClientPermission -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -User -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-ScopeAdmins -ScopeIds", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMailboxMigrationRequestStatistics -DiagnosticInfo -ErrorAction -ErrorVariable -Identity -IncludeReport -IncludeSkippedItems -OutBuffer -OutVariable -ReportOnly -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Update-PublicFolderMailbox -Confirm -CreateAssociatedDumpster -ErrorAction -ErrorVariable -FolderId -ForceOnlineSync -FullSync -Identity -InvokeSynchronizer -OutBuffer -OutVariable -ReconcileFolders -SuppressStatus -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Suspend-PublicFolderMailboxMigrationRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -SuspendComment -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Start-AuditAssistant -Identity", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PublicFolderMailboxMigrationRequest -AcceptLargeDataLoss -BadItemLimit -Confirm -ErrorAction -ErrorVariable -Identity -LargeItemLimit -OutBuffer -OutVariable -SkipInitialConnectionValidation -SkipMerging -SkippedItemApprovalTime -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-PublicFolder -AgeLimit -Confirm -EformsLocaleId -ErrorAction -ErrorVariable -Force -Identity -IssueWarningQuota -MailEnabled -MailRecipientGuid -MaxItemSize -Name -OutBuffer -OutVariable -Path -PerUserReadStateEnabled -ProhibitPostQuota -RetainDeletedItemsFor -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-OrganizationConfig -DefaultPublicFolderAgeLimit -DefaultPublicFolderDeletedItemRetention -DefaultPublicFolderIssueWarningQuota -DefaultPublicFolderMaxItemSize -DefaultPublicFolderMovedItemRetention -DefaultPublicFolderProhibitPostQuota -PublicFoldersEnabled -PublicFolderShowClientControl -RemotePublicFolderMailboxes", + "(Microsoft.Exchange.Management.PowerShell.E2010) Set-Mailbox -DefaultPublicFolderMailbox -Identity -IsExcludedFromServingHierarchy -PublicFolder", + "(Microsoft.Exchange.Management.PowerShell.E2010) Resume-PublicFolderMailboxMigrationRequest -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PublicFolderMailboxMigrationRequest -Confirm -Debug -DomainController -ErrorAction -ErrorVariable -Force -Identity -OutBuffer -OutVariable -Verbose -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PublicFolderClientPermission -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -User -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Remove-PublicFolder -Confirm -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -Recurse -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-PublicFolder -Confirm -EformsLocaleId -ErrorAction -ErrorVariable -Mailbox -Name -OutBuffer -OutVariable -Path -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) New-Mailbox -HoldForMigration -IsExcludedFromServingHierarchy -Name -PublicFolder -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-User -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-UnifiedAuditSetting -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderStatistics -ErrorAction -ErrorVariable -Identity -Mailbox -OutBuffer -OutVariable -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMailboxMigrationRequest -BatchName -ErrorAction -ErrorVariable -Identity -Name -OutBuffer -OutVariable -ResultSize -Status -Suspend -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolderMailboxDiagnostics -Confirm -ErrorAction -ErrorVariable -Identity -IncludeDumpsterInfo -IncludeHierarchyInfo -OutBuffer -OutVariable -WarningAction -WarningVariable -WhatIf", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-PublicFolder -ErrorAction -ErrorVariable -GetChildren -Identity -LostAndFound -Mailbox -OutBuffer -OutVariable -Recurse -ResidentFolders -ResultSize -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Get-Mailbox -ErrorAction -ErrorVariable -Filter -Identity -OutBuffer -OutVariable -PublicFolder -RecipientTypeDetails -ResultSize -Verbose -WarningAction -WarningVariable", + "(Microsoft.Exchange.Management.PowerShell.E2010) Add-PublicFolderClientPermission -AccessRights -Confirm -ErrorAction -ErrorVariable -Identity -OutBuffer -OutVariable -User -WarningAction -WarningVariable -WhatIf" + ], + "excludedResourceActions": [], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/fa1d7878-e8cb-41a1-8254-0142355c9f84.json b/RoleDefinitions/fa1d7878-e8cb-41a1-8254-0142355c9f84.json new file mode 100644 index 000000000..e657b2a79 --- /dev/null +++ b/RoleDefinitions/fa1d7878-e8cb-41a1-8254-0142355c9f84.json @@ -0,0 +1,72 @@ +{ + "id": "fa1d7878-e8cb-41a1-8254-0142355c9f84", + "displayName": "Read Only Operator", + "description": "Read Only Operators view user, device, enrollment, configuration and application information and cannot make changes to Intune.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "fa1d7878-e8cb-41a1-8254-0142355c9f84", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/MobileApps/Read", + "Microsoft.Intune/TermsAndConditions/Read", + "Microsoft.Intune/ManagedApps/Read", + "Microsoft.Intune/ManagedDevices/Read", + "Microsoft.Intune/ManagedDevices/ViewReports", + "Microsoft.Intune/DeviceConfigurations/Read", + "Microsoft.Intune/DeviceConfigurations/ViewReports", + "Microsoft.Intune/DeviceCompliancePolices/Read", + "Microsoft.Intune/DeviceCompliancePolices/ViewReports", + "Microsoft.Intune/TelecomExpenses/Read", + "Microsoft.Intune/RemoteAssistance/Read", + "Microsoft.Intune/RemoteAssistance/ViewReports", + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/EndpointProtection/Read", + "Microsoft.Intune/EnrollmentProgramToken/Read", + "Microsoft.Intune/AppleEnrollmentProfiles/Read", + "Microsoft.Intune/AppleDeviceSerialNumbers/Read", + "Microsoft.Intune/DeviceEnrollmentManagers/Read", + "Microsoft.Intune/CorporateDeviceIdentifiers/Read", + "Microsoft.Intune/Roles/Read", + "Microsoft.Intune/Reports/Read", + "Microsoft.Intune/AndroidSync/Read", + "Microsoft.Intune/Audit/Read", + "Microsoft.Intune/RemoteTasks/GetFileVaultKey", + "Microsoft.Intune/SecurityBaselines/Read", + "Microsoft.Intune/ASRPolicy/Read", + "Microsoft.Intune/EDRPolicy/Read", + "Microsoft.Intune/AppControlPolicy/Read", + "Microsoft.Intune/PolicySets/Read", + "Microsoft.Intune/EndpointAnalytics/Read", + "Microsoft.Intune/AssignmentFilter/Read", + "Microsoft.Intune/MicrosoftDefenderATP/Read", + "Microsoft.Intune/Customization/Read", + "Microsoft.Intune/MicrosoftStoreForBusiness/Read", + "Microsoft.Intune/WindowsEnterpriseCertificate/Read", + "Microsoft.Intune/PartnerDeviceManagement/Read", + "Microsoft.Intune/MobileThreatDefense/Read", + "Microsoft.Intune/CertificateConnector/Read", + "Microsoft.Intune/DerivedCredentials/Read", + "Microsoft.Intune/AndroidFota/Read", + "Microsoft.Intune/QuietTimePolicies/Read", + "Microsoft.Intune/QuietTimePolicies/ViewReports", + "Microsoft.Intune/CloudAttach/ResourceExplorer", + "Microsoft.Intune/CloudAttach/ClientDetails", + "Microsoft.Intune/CloudAttach/Timeline", + "Microsoft.Intune/CloudAttach/Collections", + "Microsoft.Intune/CloudAttach/Applications", + "Microsoft.Intune/CloudAttach/Scripts", + "Microsoft.Intune/CloudAttach/SoftwareUpdates", + "Microsoft.Intune/EpmPolicy/Read", + "Microsoft.Intune/EpmPolicy/ViewReports", + "Microsoft.Intune/EpmPolicy/ViewElevationRequests", + "Microsoft.Intune/ServiceNow/ViewIncidents" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/fb2603eb-3c87-4be3-8b5b-d58a5b4a0bc0.json b/RoleDefinitions/fb2603eb-3c87-4be3-8b5b-d58a5b4a0bc0.json new file mode 100644 index 000000000..2f6e72120 --- /dev/null +++ b/RoleDefinitions/fb2603eb-3c87-4be3-8b5b-d58a5b4a0bc0.json @@ -0,0 +1,25 @@ +{ + "id": "fb2603eb-3c87-4be3-8b5b-d58a5b4a0bc0", + "displayName": "Intune Role Administrator", + "description": "Intune Role Administrators manage custom Intune roles and add assignments for built-in Intune roles. It is the only Intune role that can assign permissions to Administrators.", + "resourceScopes": [ + "/" + ], + "isBuiltIn": true, + "isEnabled": true, + "templateId": "fb2603eb-3c87-4be3-8b5b-d58a5b4a0bc0", + "version": null, + "rolePermissions": [ + { + "allowedResourceActions": [ + "Microsoft.Intune/Organization/Read", + "Microsoft.Intune/Roles/Create", + "Microsoft.Intune/Roles/Read", + "Microsoft.Intune/Roles/Update", + "Microsoft.Intune/Roles/Delete", + "Microsoft.Intune/Roles/Assign" + ], + "condition": null + } + ] +} \ No newline at end of file diff --git a/RoleDefinitions/fdd7a751-b60b-444a-984c-02652fe8fa1c.json b/RoleDefinitions/fdd7a751-b60b-444a-984c-02652fe8fa1c.json index d01392c23..69d34550e 100644 --- a/RoleDefinitions/fdd7a751-b60b-444a-984c-02652fe8fa1c.json +++ b/RoleDefinitions/fdd7a751-b60b-444a-984c-02652fe8fa1c.json @@ -20,6 +20,7 @@ "microsoft.azure.supportTickets/allEntities/allTasks", "microsoft.directory/deletedItems.groups/delete", "microsoft.directory/deletedItems.groups/restore", + "microsoft.directory/groups/assignedLabels/update", "microsoft.directory/groups/assignLicense", "microsoft.directory/groups/basic/update", "microsoft.directory/groups/classification/update", diff --git a/ServicePrincipals/00000003-0000-0000-c000-000000000000.json b/ServicePrincipals/00000003-0000-0000-c000-000000000000.json index 119883dc0..667e93c34 100644 --- a/ServicePrincipals/00000003-0000-0000-c000-000000000000.json +++ b/ServicePrincipals/00000003-0000-0000-c000-000000000000.json @@ -7517,6 +7517,19 @@ "isPreAuthorizationRequired": false, "isPrivate": false }, + { + "allowedMemberTypes": [ + "Application" + ], + "description": "Allows the app to read workforce integrations without a signed-in user.", + "displayName": "Read workforce integrations", + "id": "f10b94b9-37d1-4c88-8b7e-bf75a1152d39", + "isEnabled": true, + "origin": "Application", + "value": "WorkforceIntegration.Read.All", + "isPreAuthorizationRequired": false, + "isPrivate": false + }, { "allowedMemberTypes": [ "Application" diff --git a/ServicePrincipals/0d38933a-0bbd-41ca-9ebd-28c4b5ba7cb7.json b/ServicePrincipals/0d38933a-0bbd-41ca-9ebd-28c4b5ba7cb7.json index ab53c93dd..450d03196 100644 --- a/ServicePrincipals/0d38933a-0bbd-41ca-9ebd-28c4b5ba7cb7.json +++ b/ServicePrincipals/0d38933a-0bbd-41ca-9ebd-28c4b5ba7cb7.json @@ -79,12 +79,12 @@ "allowedMemberTypes": [ "Application" ], - "description": "Allow app to read properties of jobs submitted to eDiscovery.", - "displayName": "eDiscovery.Jobs.Read", - "id": "0f062bc7-6f95-469a-810f-d846e6cbba44", + "description": "Allow app to submit jobs to eDiscovery.", + "displayName": "eDiscovery.Jobs.Write", + "id": "5faac7a2-ab08-4049-aece-ab2b4de5f59e", "isEnabled": true, "origin": "Application", - "value": "eDiscovery.Jobs.Read", + "value": "eDiscovery.Jobs.Write", "isPreAuthorizationRequired": false, "isPrivate": false }, @@ -92,12 +92,12 @@ "allowedMemberTypes": [ "Application" ], - "description": "Allow app to submit jobs to eDiscovery.", - "displayName": "eDiscovery.Jobs.Write", - "id": "5faac7a2-ab08-4049-aece-ab2b4de5f59e", + "description": "Allow app to read properties of jobs submitted to eDiscovery.", + "displayName": "eDiscovery.Jobs.Read", + "id": "0f062bc7-6f95-469a-810f-d846e6cbba44", "isEnabled": true, "origin": "Application", - "value": "eDiscovery.Jobs.Write", + "value": "eDiscovery.Jobs.Read", "isPreAuthorizationRequired": false, "isPrivate": false } @@ -111,6 +111,28 @@ }, "keyCredentials": [], "publishedPermissionScopes": [ + { + "adminConsentDescription": "Allow app to submit jobs to eDiscovery.", + "adminConsentDisplayName": "eDiscovery.Jobs.Write", + "id": "5faac7a2-ab08-4049-aece-ab2b4de5f59e", + "isEnabled": true, + "type": "Admin", + "userConsentDescription": "Allow app to submit jobs to eDiscovery.", + "userConsentDisplayName": "eDiscovery.Jobs.Write", + "value": "eDiscovery.Jobs.Write", + "isPrivate": false + }, + { + "adminConsentDescription": "Allow app to read properties of jobs submitted to eDiscovery.", + "adminConsentDisplayName": "eDiscovery.Jobs.Read", + "id": "0f062bc7-6f95-469a-810f-d846e6cbba44", + "isEnabled": true, + "type": "Admin", + "userConsentDescription": "Allow app to read properties of jobs submitted to eDiscovery.", + "userConsentDisplayName": "eDiscovery.Jobs.Read", + "value": "eDiscovery.Jobs.Read", + "isPrivate": false + }, { "adminConsentDescription": "Allow app to access compliance connector", "adminConsentDisplayName": "Connector.Read", diff --git a/ServicePrincipals/92876b03-76a3-4da8-ad6a-0511ffdf8647.json b/ServicePrincipals/92876b03-76a3-4da8-ad6a-0511ffdf8647.json index ea4bce31f..f8e2d1736 100644 --- a/ServicePrincipals/92876b03-76a3-4da8-ad6a-0511ffdf8647.json +++ b/ServicePrincipals/92876b03-76a3-4da8-ad6a-0511ffdf8647.json @@ -50,12 +50,12 @@ "allowedMemberTypes": [ "Application" ], - "description": "Allow app to read properties of jobs submitted to eDiscovery.", - "displayName": "eDiscovery.Jobs.Read", - "id": "0f062bc7-6f95-469a-810f-d846e6cbba44", + "description": "Allow app to submit jobs to eDiscovery.", + "displayName": "eDiscovery.Jobs.Write", + "id": "5faac7a2-ab08-4049-aece-ab2b4de5f59e", "isEnabled": true, "origin": "Application", - "value": "eDiscovery.Jobs.Read", + "value": "eDiscovery.Jobs.Write", "isPreAuthorizationRequired": false, "isPrivate": false }, @@ -63,12 +63,12 @@ "allowedMemberTypes": [ "Application" ], - "description": "Allow app to submit jobs to eDiscovery.", - "displayName": "eDiscovery.Jobs.Write", - "id": "5faac7a2-ab08-4049-aece-ab2b4de5f59e", + "description": "Allow app to read properties of jobs submitted to eDiscovery.", + "displayName": "eDiscovery.Jobs.Read", + "id": "0f062bc7-6f95-469a-810f-d846e6cbba44", "isEnabled": true, "origin": "Application", - "value": "eDiscovery.Jobs.Write", + "value": "eDiscovery.Jobs.Read", "isPreAuthorizationRequired": false, "isPrivate": false } @@ -81,7 +81,30 @@ "logoUrl": null }, "keyCredentials": [], - "publishedPermissionScopes": [], + "publishedPermissionScopes": [ + { + "adminConsentDescription": "Allow app to submit jobs to eDiscovery.", + "adminConsentDisplayName": "eDiscovery.Jobs.Write", + "id": "5faac7a2-ab08-4049-aece-ab2b4de5f59e", + "isEnabled": true, + "type": "Admin", + "userConsentDescription": "Allow app to submit jobs to eDiscovery.", + "userConsentDisplayName": "eDiscovery.Jobs.Write", + "value": "eDiscovery.Jobs.Write", + "isPrivate": false + }, + { + "adminConsentDescription": "Allow app to read properties of jobs submitted to eDiscovery.", + "adminConsentDisplayName": "eDiscovery.Jobs.Read", + "id": "0f062bc7-6f95-469a-810f-d846e6cbba44", + "isEnabled": true, + "type": "Admin", + "userConsentDescription": "Allow app to read properties of jobs submitted to eDiscovery.", + "userConsentDisplayName": "eDiscovery.Jobs.Read", + "value": "eDiscovery.Jobs.Read", + "isPrivate": false + } + ], "passwordCredentials": [], "resourceSpecificApplicationPermissions": [], "verifiedPublisher": {