Have you ever needed to grant permissions to another users mailbox but done have access to their credentials. If you have a Global Admin account you can edit these permissions using PowerShell using the steps below
- Click on the start menu and open PowerShell
- Enter the following command. This will save you office 365 credentials into PowerShell
$UserCredential = Get-Credential
- When the Windows PowerShell Credential Request opens enter the username/password for a Global Admin account and click Ok
- Run the following command to connect to your Exchange Online instance
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
- Run the following command to import the required cmdlets
- Import-PSSession $Session
- Enter the command below to check the current permissions before making any changes
- Get-MailboxFolderPermission -Identity User:\Calendar | fl
- User the following command to edit the permissions on a users calendar
- Add-MailboxFolderPermission -Identity “username:\calendar” -User username -AccessRights Reviewer
In the example below I am giving the account “Test” Reviewer access to Supports calendar
Add-MailboxFolderPermission -Identity “Support:\calendar” -User Test -AccessRights Reviewer
- If you are shown the following error when trying to add permissions it means the user already has access permissions set on the mailbox and you will need to edit the existing permissions using the Set-Mailboxpermission cmdlet
- Set-MailboxFolderPermission -Identity “Support:\calendar” -User Test -AccessRights Reviewer
The following list is the roles and there permission level that can be assigned using the PowerShell script
- Author: CreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
- Contributor: CreateItems, FolderVisible
- Editor: CreateItems, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
- None: FolderVisible
- NonEditingAuthor: CreateItems, FolderVisible, ReadItems
- Owner: CreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderContact, FolderOwner, FolderVisible, ReadItems
- PublishingEditor: CreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
- PublishingAuthor: CreateItems, CreateSubfolders, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
- Reviewer: FolderVisible, ReadItems