The article describes a way how to verify user's access rights to other people's mailboxes.




Check who has access to a single mailbox



In order to check who has access to a single mailbox, run the following cmdlet:

Get-MailboxPermission -Identity arleta

arleta - identity of the mailbox, e.g. arleta@testova365.onmicrosoft.com


In the screenshot below you can see that user2@testova365.onmicrosoft.com has FullAccess rights on the mailbox. But how to check to which and how many mailboxes user2 has access?




Check what mailboxes a user has access to



There is no direct cmdlet, but we can loop through all the existing mailboxes and verify specific user's rights:
foreach($mailbox in $mailboxes){Get-MailboxPermission -Identity $mailbox.Identity -User user2@testova365.onmicrosoft.com}



The AccessRights columns displays the access level to each individual mailbox.  User's own mailbox will not be displayed.



Export to CSV


The report on user's permissions can be exported to a csv file:
foreach($mailbox in $mailboxes){Get-MailboxPermission -Identity $mailbox.Identity -User user2@testova365.onmicrosoft.com | export-csv c:\maiperms.csv -Append}



Other Languages


This article is available in other languages:

real
time web analytics