Export Shared Mailbox Full Access Permissions to CSV # The mailbox names CSV File must follow the format below: Identity of mailboxes separated by new line without header. GetSharedMailboxPermissions.ps1 -MBNamesFile C:/SharedMB.txt To get permissions of specific mailboxes, pass an input file with a Display Name/ Alias/ Distinguished Name/ Canonical DN/ Email Address or GUID of Shared Mailboxes. You can use – MBNa mesFileparam to export permissions of a Shared Mailbox from the input list called “SharedMB.txt”. To execute the script with MFA enabled account, you need to mention -MFA switch during script execution./GetSharedMailboxPermissions.ps1 -MFA Export Shared Mailbox Permissions for Single/List of Shared Mailbox: # How to: Execute ‘Shared Mailbox Permission’ PowerShell Script: #įor non-MFA account, you can run the script as you run normally./GetSharedMailboxPermissions.ps1 How to: Execute ‘Shared Mailbox Permission’ PowerShell Script with MFA: # You can execute this script with both MFA and non-MFA accounts.
I.e., credentials can be passed as a parameter instead of saving inside the script
Allows you to filter output using your desired permissions like Send-as, Send-on-behalf or Full access. You can choose to either “export permissions of all mailboxes” or pass an input file to get permissions of specific mailboxes alone. The script can be executed with MFA enabled account also. The script display only “ Explicitly assigned permissions” to mailboxes which means it will ignore “SELF” permission that each user on his mailbox and inherited permission. To exclude those entries, we can use the Where-Object command to filter rights only for mailbox user accounts. Get-Mailbox -RecipientTypeDetails SharedMailbox -ResultSize:Unlimited | Get-MailboxPermission |īy default, the Get-MailboxPermission command lists built-in and system account rights along with users permission. Select-Object Identity,Alias,DisplayName | Sort DisplayName List shared mailboxes and users who have permissionsĪfter retrieving mailboxes, we can use the cmdlet Get-MailboxPermission to get the available permissions configured for the users in every mailbox. Get-Mailbox -RecipientTypeDetails SharedMailbox -ResultSize:Unlimited | You can find and list shared mailboxes using the Exchange Powershell cmdlet Get-Mailbox by passing the input “SharedMailbox” for the parameter -RecipientTypeDetails. Reference post: Add or remove members from a shared mailbox. Actually shared mailbox do not have members, but nowadays Microsoft itself calls users as members who have been granted Full Access permission to the shared mailbox. The commands used in this post specifically tested in Exchange Online, however it should work for Exchange On-Premises (Exchange 20) as well. In this post, I am going to share Powershell commands to get shared mailboxes and find users who have permissions (Full Access or Send as) in the shared mailboxes.
0 kommentar(er)
