Commands › Exchange Online

Get-EXOMailboxFolderPermission

Exchange Online ExchangeOnlineManagement Get-*

For more information, see About the Exchange Online PowerShell module. Use the Get-ExOMailboxFolderPermission cmdlet to view folder-level permissions in mailboxes.

Quick start script

# Get-EXOMailboxFolderPermission — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-EXOMailboxFolderPermission | Format-List

# 3. Export for evidence / drift tracking
Get-EXOMailboxFolderPermission | Export-Clixml .\EXOMailboxFolderPermission-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-EXOMailboxFolderPermission [[-Identity] <String>]
 [-ExternalDirectoryObjectId <Guid>]
 [-GroupMailbox]
 [-PrimarySmtpAddress <String>]
 [-User <String>]
 [-UserPrincipalName <String>]
 [<CommonParameters>]

Parameters (6)

ParameterTypeRequiredWhat it controls
-Identity String The Identity parameter specifies the mailbox folder that you want to view. This parameter uses the syntax: `<Mailbox>:\<Folder>`. For the best performance, we recommend using the user ID or user principal name (UPN)...
-ExternalDirectoryObjectId Guid The ExternalDirectoryObjectId parameter identifies the mailbox that you want to view by the ObjectId in Microsoft Entra ID.
-GroupMailbox SwitchParameter The GroupMailbox switch is required to return Microsoft 365 Groups in the results. You don't need to specify a value with this switch.
-PrimarySmtpAddress String The PrimarySmtpAddress identifies the mailbox that you want to view by primary SMTP email address (for example, navin@contoso.com).
-User String The User parameter filters the results by the specified mailbox, mail user, or mail-enabled security group (security principal) that's granted permission to the mailbox folder. You can use any value that uniquely...
-UserPrincipalName String The UserPrincipalName parameter identifies the mailbox that you want to view by UPN (for example, `navin@contoso.onmicrosoft.com`).

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.