Commands › Exchange Online

Get-EXORecipientPermission

Exchange Online ExchangeOnlineManagement Get-*

For more information, see About the Exchange Online PowerShell module. Use the Get-EXORecipientPermission cmdlet to view information about SendAs permissions that are configured for users in a cloud-based organization.

Quick start script

# Get-EXORecipientPermission — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-EXORecipientPermission | Format-List

# 3. Export for evidence / drift tracking
Get-EXORecipientPermission | Export-Clixml .\EXORecipientPermission-$(Get-Date -Format yyyyMMdd).xml

Syntax — 2 parameter sets

Default (Default)

Get-EXORecipientPermission
 [-AccessRights <MultiValuedProperty>]
 [-ResultSize <Unlimited>]
 [-Trustee <String>]
 [<CommonParameters>]

Identity

Get-EXORecipientPermission [[-Identity] <String>]
 [-AccessRights <MultiValuedProperty>]
 [-ExternalDirectoryObjectId <Guid>]
 [-PrimarySmtpAddress <String>]
 [-ResultSize <Unlimited>]
 [-Trustee <String>]
 [-UserPrincipalName <String>]
 [<CommonParameters>]

Parameters (7)

Parameter	Type	What it controls
-Identity	String	The Identity parameter identifies the recipient that you want to view. The user or group specified by the Trustee parameter has Send As permissions on this recipient. You can specify any type of recipient, for example:
-AccessRights	MultiValuedProperty	The AccessRights parameter filters the results by permission. The only valid value for this parameter is SendAs.
-ExternalDirectoryObjectId	Guid	The ExternalDirectoryObjectId parameter identifies the recipient that you want to view by the ObjectId in Microsoft Entra ID.
-PrimarySmtpAddress	String	The PrimarySmtpAddress identifies the recipient that you want to view by primary SMTP email address (for example, navin@contoso.com).
-ResultSize	Unlimited	The ResultSize parameter specifies the maximum number of results to return. If you want to return all requests that match the query, use unlimited for the value of this parameter. The default value is 1000.
-Trustee	String	The Trustee parameter filters the results by the user or group who has Send As permissions. You can specify the following types of users or groups:
-UserPrincipalName	String	The UserPrincipalName parameter identifies the recipient that you want to view by UPN (for example, navin@contoso.onmicrosoft.com).

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.