Commands › Exchange Online

Get-EXOMailboxPermission

Exchange Online ExchangeOnlineManagement Get-*

For more information, see About the Exchange Online PowerShell module. Use the Get-EXOMailboxPermission cmdlet to retrieve permissions on a mailbox.

Quick start script

# Get-EXOMailboxPermission — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-EXOMailboxPermission | Format-List

# 3. Export for evidence / drift tracking
Get-EXOMailboxPermission | Export-Clixml .\EXOMailboxPermission-$(Get-Date -Format yyyyMMdd).xml

Syntax — 2 parameter sets

Default (Default)

Get-EXOMailboxPermission [-ResultSize <Unlimited>]
 [<CommonParameters>]

Identity

Get-EXOMailboxPermission
 [-ExternalDirectoryObjectId <Guid>]
 [-Identity <String>]
 [-Owner]
 [-PrimarySmtpAddress <String>]
 [-ResultSize <Unlimited>]
 [-SoftDeletedMailbox]
 [-User <String>]
 [-UserPrincipalName <String>]
 [<CommonParameters>]

Parameters (8)

Parameter	Type	What it controls
-ExternalDirectoryObjectId	Guid	The ExternalDirectoryObjectId parameter identifies the mailbox that you want to view by the ObjectId in Microsoft Entra ID.
-Identity	String	The Identity parameter specifies the mailbox you want to view. For the best performance, we recommend using the user ID or user principal name (UPN) to identify the mailbox.
-Owner	SwitchParameter	The Owner switch returns the owner information for the mailbox that's specified by the Identity parameter. You don't need to specify a value with this switch.
-PrimarySmtpAddress	String	The PrimarySmtpAddress identifies the mailbox that you want to view by primary SMTP email address (for example, navin@contoso.com).
-ResultSize	Unlimited	The ResultSize parameter specifies the maximum number of results to return. If you want to return all requests that match the query, use unlimited for the value of this parameter. The default value is 1000.
-SoftDeletedMailbox	SwitchParameter	The SoftDeletedMailbox switch is required to return soft-deleted mailboxes in the results. You don't need to specify a value with this switch.
-User	String	The User parameter returns information about the user who has permissions to the mailbox specified by the Identity parameter.
-UserPrincipalName	String	The UserPrincipalName parameter identifies the mailbox that you want to view by UPN (for example, navin@contoso.onmicrosoft.com).

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.