Commands › Exchange Online

Add-PublicFolderAdministrativePermission

Exchange Online ExchangeOnlineManagement Add-*

Add administrative permissions to a public folder or a public folder hierarchy.

Quick start script

# Add-PublicFolderAdministrativePermission — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Add-PublicFolderAdministrativePermission -Identity <PublicFolderIdParameter> -AccessRights <MultiValuedProperty> -Instance <PublicFolderAdministrativeAceObject> | Format-List

# 3. Export for evidence / drift tracking
Add-PublicFolderAdministrativePermission | Export-Clixml .\PublicFolderAdministrativePermission-$(Get-Date -Format yyyyMMdd).xml

Syntax — 3 parameter sets

Identity

Add-PublicFolderAdministrativePermission [-Identity] <PublicFolderIdParameter> -AccessRights <MultiValuedProperty> -User <SecurityPrincipalIdParameter>
 [-Confirm]
 [-Deny]
 [-DomainController <Fqdn>]
 [-InheritanceType <ActiveDirectorySecurityInheritance>]
 [-Server <ServerIdParameter>]
 [-WhatIf]
 [<CommonParameters>]

Instance

Add-PublicFolderAdministrativePermission [[-Identity] <PublicFolderIdParameter>] -Instance <PublicFolderAdministrativeAceObject>
 [-AccessRights <MultiValuedProperty>]
 [-User <SecurityPrincipalIdParameter>]
 [-Confirm]
 [-Deny]
 [-DomainController <Fqdn>]
 [-InheritanceType <ActiveDirectorySecurityInheritance>]
 [-Server <ServerIdParameter>]
 [-WhatIf]
 [<CommonParameters>]

Owner

Add-PublicFolderAdministrativePermission [-Identity] <PublicFolderIdParameter> -Owner <SecurityPrincipalIdParameter>
 [-Confirm]
 [-DomainController <Fqdn>]
 [-Server <ServerIdParameter>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (11)

Parameter	Type	Required	What it controls
-Identity	PublicFolderIdParameter	yes	The Identity parameter specifies the GUID or public folder name that represents a specific public folder. You can also include the path using the format TopLevelPublicFolder\\PublicFolder.
-AccessRights	MultiValuedProperty	yes	The AccessRights parameter specifies the rights that you want to add for the administrator on the public folder. Valid values include:
-Instance	PublicFolderAdministrativeAceObject	yes	The Instance parameter specifies whether to pass an entire object to the command to be processed. It's mainly used in scripts where an entire object must be passed to the command.
-Owner	SecurityPrincipalIdParameter	yes	The Owner parameter specifies the owner of the public folder object. You can specify the following types of users or groups (security principals) for this parameter:
-User	SecurityPrincipalIdParameter	yes	The User parameter specifies who gets the admin permissions on the public folder. You can specify the following types of users or groups:
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-Deny	SwitchParameter		The Deny switch specifies that the permissions you're adding are Deny permissions. You don't need to specify a value with this switch.
-DomainController	Fqdn		The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name...
-InheritanceType	ActiveDirectorySecurityInheritance		The InheritanceType parameter specifies how permissions are inherited. Valid values are:
-Server	ServerIdParameter		The Server parameter specifies the Exchange server where you want to run this command. You can use any value that uniquely identifies the server. For example:
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.