Exchange: Grant Delegate permission on mailbox using Powershell
Scenarios that are top five service request generators in day to day Admin tasks.
This is the first ladder towards taking a grip on becoming L-3 or higher Administrator. The more you practice PowerShell the better you get at PowerShell scripting.
1. Delegating access to mailbox:
Add-mailboxpermission –Identity c.d@contoso.com –User a.b@contoso.com –accessrights Fullaccess, readpermission –inheritancetype All –Automapping:$True
This example grants a.b@contoso.com fullaccess and read permission on C.d@contoso.com mailbox. Auto mapping parameter helps to automatically load the delegated mailbox in Outlook.
2. Mailbox Folder permission:
Add-mailboxfolderpermission –Identity c.d@contoso.com:\calendar –User a.b@contoso.com –accessrights Editor
This example grants a.b@contoso.com Editor Permission on C.d@contoso.com calendar folder
3. Delegate Mailbox Root permission:
Add-mailboxfolderpermission –Identity c.d@contoso.com:\ –User a.b@contoso.com –accessrights Owner
This example grants a.b@contoso.com root mailbox Owner Permission on C.d@contoso.com’s mailbox. The root folder is the parent permission which allows a delegate to access the entire hierarchy of the folders inside a mailbox.
4. Assign Default user “Free Busy” permission on a user mailbox:
Add-mailboxfolderpermission –Identity c.d@contoso.com:\Calendar –User “Default” –accessrights “AvailabilityOnly”
This example allows each and every user in an organisation to see each other’s free busy information. If the default user has “None” permission, then the user's free busy info will not be available.
5. Bulk assign calendar permission to default user:
$allmailbox = Get-Mailbox -Resultsize Unlimited | Foreach ($Mailbox in $allmailbox) {Set-mailboxfolderpermission –identity ($Mailbox.alias+’:\calendar’) –user Default –Accessrights AvailabilityOnly}
Note: Depending upon the level of authorisation, the Accessrights, Identity & User parameters would change. You need to carefully think and then apply whatever is required based on a specific task.