That can be done by carrying out the following procedure:

For example, to assign the CsLocationAdministrator role to a user, you must add that user to the CsLocationAdministrator group. To assign an RBAC role to a user, you must add that user to the appropriate Active Directory security group. Get-CsAdminRole -Identity 'CsHelpDesk' | Select-Object -ExpandProperty Cmdlets Assigning an RBAC role to a user To view a list of the cmdlets that have been assigned to a role, use a command similar to this: Keep in mind that the Identity of the RBAC role (for example, CsVoiceAdministrator) has a direct mapping to a security group found in the Users container in Active Directory Domain Services. You can retrieve basic information about your RBAC roles by running the following command from within the Skype for Business Server Management Shell: That means that users who have been assigned the CsHelpDesk role cannot create new voice policies.

However, the CsHelpDesk role has not been assigned the New-CsVoicePolicy cmdlet. That means users who have been assigned the CsHelpDesk role can lock and unlock user PIN numbers. For example, the CsHelpDesk role has been assigned the Lock-CsClientPin and UnlockCsClientPin cmdlets. These cmdlets represent the tasks that can be carried out by users who have been assigned the given RBAC role. In addition, each RBAC role is associated with a set of Skype for Business Server Windows PowerShell cmdlets. For example, the RBAC role CsHelpDesk corresponds to the CsHelpDesk group found in the Users container in Active Directory Domain Services. These roles correspond to universal security groups in Active Directory Domain Services.

When you install Skype for Business Server, a number of RBAC roles are created for you. In Skype for Business Server, administrative tasks are delegated to users by using the role-based access control (RBAC) feature.

Use ad groups in skype for business onl