The article describes a way how to verify user's access rights to other people's mailboxes.

Check who has access to a single mailbox

In order to check who has access to a single mailbox, run the following cmdlet:

Get-MailboxPermission -Identity arleta

arleta - identity of the mailbox, e.g.

In the screenshot below you can see that has FullAccess rights on the mailbox. But how to check to which and how many mailboxes user2 has access?

Check what mailboxes a user has access to

There is no direct cmdlet, but we can loop through all the existing mailboxes and verify specific user's rights:
foreach($mailbox in $mailboxes){Get-MailboxPermission -Identity $mailbox.Identity -User}

The AccessRights columns displays the access level to each individual mailbox.  User's own mailbox will not be displayed.

Export to CSV

The report on user's permissions can be exported to a csv file:
foreach($mailbox in $mailboxes){Get-MailboxPermission -Identity $mailbox.Identity -User | export-csv c:\maiperms.csv -Append}

Other Languages

This article is available in other languages:

        time web analytics