There has been times I have been asked to add permissions onto VIPs or Managers calendars or folders for their PA’s or secretaries.
You could go into outlook as the VIP/Manager and set the calendar or folder permission that way, but often you find that the VIP is busy, not available or quite simply doesn’t want you snooping around their outlook…
So, using the Add-MailboxFolderPermission cmdlet you can achieve this quite easily.
First off you need to decide which permissions you wish to give the user , the first table below shows what the individual permissions do, the second table shows the role with the permissions alongside so you can decide which role is the best option to give.
The user can create items within the specified folder.The user can only delete items that they created from the specified folder.The user can only edit items that they created in the specified folder.The user is the owner of the specified folder. The user can view the folder, move the move the folder, and create subfolders. The user can’t read items, edit items, delete items, or create items.The user can read items within the specified folder.
|CreateItems||The user can create items within the specified folder.|
|CreateSubfolders||The user can create subfolders in the specified folder.|
|DeleteAllItems||The user can delete all items in the specified folder.|
|DeleteOwnedItems||The user can only delete items that they created from the specified folder.|
|EditAllItems||The user can edit all items in the specified folder.|
|EditOwnedItems||The user can only edit items that they created in the specified folder.|
|FolderContact||The user is the contact for the specified public folder.|
|FolderOwner||The user is the owner of the specified folder. The user can view the folder, move the move the folder, and create subfolders. The user can’t read items, edit items, delete items, or create items.|
The user can view the specified folder, but can’t read or edit items within the specified public folder.
|ReadItems||The user can read items within the specified folder.|
|Author||CreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems|
|Editor||CreateItems, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems|
|NonEditingAuthor||CreateItems, FolderVisible, ReadItems|
|Owner||CreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderContact, FolderOwner, FolderVisible, ReadItems|
|PublishingEditor||CreateItems, CreateSubfolders, DeleteOwnedItems, EditOWnedItems, FolderVisible, ReadItems|
|PublishingAuthor||CreateItems, CreateSubFolders, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems|
These Two following roles only apply to Calendar folders
|AvailabilityOnly||View only availability data|
|LimitedDetails||View availability data with subject and location|
There are a couple of cmdlets that are available to you when assigning and reviewing folder permissions.
There is Get-MailboxFolderPermission, Add-MailboxFolderPermission and Remove-MailboxFolderPermission
The Get-MailboxFolderPermission simple gets the permissions that are already assigned.
In the below example, the syntax gets the mailbox folder permission for Alana Bond’s (abond) calendar
Get-MailboxFolderPermission -Identity ABOND:\Calendar
As we can see the default show “AvailabilityOnly” and we can see what that looks like for the users the appointments simply show as “Busy”
I am now going to give my user account access to Alana’s calendar and with editor permissions but running the following syntax
Add-MailboxFolderPermission -identity “abond:\Calendar” -user “sam.odonnell” -AccessRights Editor
When running the Get command again we can see that the permissions have been applied
From a users perspective it looks like this..
As you can see, we can now see the appointments because the Editor role allows you the permissions to do so.
To remove the permissions you simply run the Remove-MailboxFolderPermission syntax.
Remove-MailboxFolderPermision -Identity "abond:\Calendar" -user "sam.odonnell"
You will need to confirm you wish to do this.
Thank you for reading.