EXCHANGE RBAC(基于角色的访问控制)管理工具

兼容：

server 2012 r2 （需安装.net framework 3.5）

exchange 2013 sp1 cu15

下载地址：

<a href="http://rbac.codeplex.com/" target="_blank">http://rbac.codeplex.com/</a>

说明：

Customizing RBAC roles is in most cases not something that is a frequent task, so it can take a while to familiarize and re-familiarize with the concept and all cmdlets. But if your organization does not fit in the default roles, you will have to dig into it.

Overview of RBAC Manager R2, showing Management Roles, Role Assignments, included cmdlets and their paramters.

Another helpful feature is the ability to search for specific cmdlets, the tool then shows every Role Group with Management Roles that include that specific cmdlet. Very handy if you need to know which Role Groups provides a certain permission. This makes the tool valuable even if you do not require RBAC customization.

You can remove Management Roles from Role Groups, cmdlets from Management Roles but you can also remove specific parameters (after enabling the view of parameters). Create new Management Roles from a parent Role. I could do everything I needed to do without using the Exchange Management Shell. And the best part? It logs the actual Exchange PowerShell commands in a text log file for reference and documentation. Nice!

It’s not a quick tool but this is just a minor irritation. It helps to provide an overview of the RBAC implementation and allows for quick editing and management of Exchange RBAC. For those that do not frequently work with RBAC and know all cmdlets and procedures by heart, this is a great addition in your tool set. I would love to see this kind of functionality added in EAC BTW.

 本文转自 烟台小崔 51CTO博客，原文链接:http://blog.51cto.com/seawind/1897490