Loading…

Blog, thoughts and scribbles of an IT Guy all about Cloud!

Read the blog!

Setting Calendar and Folder Permissions using Exchange PowerShell

There has been times I have been asked to add permissions onto VIPs or Managers calendars or folders for their PA’s or secretaries.

You could go into outlook as the VIP/Manager and set the calendar or folder permission that way, but often you find that the VIP is busy, not available or quite simply doesn’t want you snooping around their outlook…

So, using the Add-MailboxFolderPermission cmdlet you can achieve this quite easily.

First off you need to decide which permissions you wish to give the user , the first table below shows what the individual permissions do, the second table shows the role with the permissions alongside so you can decide which role is the best option to give.

The Permissions

The user can create items within the specified folder.The user can only delete items that they created from the specified folder.The user can only edit items that they created in the specified folder.The user is the owner of the specified folder. The user can view the folder, move the move the folder, and create subfolders. The user can’t read items, edit items, delete items, or create items.The user can read items within the specified folder.

CreateItems The user can create items within the specified folder.
CreateSubfolders The user can create subfolders in the specified folder.
DeleteAllItems The user can delete all items in the specified folder.
DeleteOwnedItems The user can only delete items that they created from the specified folder.
EditAllItems The user can edit all items in the specified folder.
EditOwnedItems The user can only edit items that they created in the specified folder.
FolderContact The user is the contact for the specified public folder.
FolderOwner The user is the owner of the specified folder. The user can view the folder, move the move the folder, and create subfolders. The user can’t read items, edit items, delete items, or create items.
FolderVisible

The user can view the specified folder, but can’t read or edit items within the specified public folder.

ReadItems The user can read items within the specified folder.
The Roles
Author CreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
Contributor CreateItems, FolderVisible
Editor CreateItems, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
None FolderVisible
NonEditingAuthor CreateItems, FolderVisible, ReadItems
Owner CreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderContact, FolderOwner, FolderVisible, ReadItems
PublishingEditor CreateItems, CreateSubfolders, DeleteOwnedItems, EditOWnedItems, FolderVisible, ReadItems
PublishingAuthor CreateItems, CreateSubFolders, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
Reviewer FolderVisible, ReadItems

These Two following roles only apply to Calendar folders

AvailabilityOnly View only availability data
LimitedDetails View availability data with subject and location
The cmdlets

There are a couple of cmdlets that are available to you when assigning and reviewing folder permissions.

There is Get-MailboxFolderPermission, Add-MailboxFolderPermission and Remove-MailboxFolderPermission

The Get-MailboxFolderPermission simple gets the permissions that are already assigned.

In the below example, the syntax gets the mailbox folder permission for Alana Bond’s (abond) calendar

 

As we can see the default show “AvailabilityOnly” and we can see what that looks like for the users the appointments simply show as “Busy”

I am now going to give my user account access to Alana’s calendar and with editor permissions but running the following syntax

 

When running the Get command again we can see that the permissions have been applied

From a users perspective it looks like this..

As you can see, we can now see the appointments because the Editor role allows you the permissions to do so.

To remove the permissions you simply run the Remove-MailboxFolderPermission syntax.

 

You will need to confirm you wish to do this.

Thank you for reading.