Entra Roles to Exchange RoleGroups
Microsoft Entra built-in roles
| Entra role | Entra Description | Exchange role group | Exchange Description |
|---|---|---|---|
| Exchange Administrator | Can manage all aspects of the Exchange product. | Organization Management, ExchangeServiceAdmins_-<unique value> | Manage all aspects of Exchange Online |
| Exchange Recipient Administrator | Can create or update Exchange Online recipients within the Exchange Online organization. | Recipient Management | Create and delete all recipients, and read and update all properties of recipients in Exchange Online, Manage all tasks related to migration of recipients in Exchange Online |
| Compliance Administrator | Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365. | N/A, ComplianceAdmins_<unique value> | Manage all aspects of Office 365 Compliance Manager |
| Compliance Data Administrator | Creates and manages compliance content. | N/A | Manage all aspects of Office 365 Compliance Manager |
| Global Administrator | Can manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities. | Organization Management, TenantAdmins_-<unique value> | Manage all aspects of Exchange Online |
| Global Reader | Can read everything that a Global Administrator can, but not update anything. | View-Only Organization Management, GlobalReaders_-<unique value> | N/A |
| Helpdesk Administrator | Can reset passwords for non-administrators and Helpdesk Administrators. | Help Desk | N/A |
| N/A | N/A (Not used) | RIM-MailboxAdmins<GUID> | ApplicationImpersonation Role groups in Exchange Online |