Commands › Exchange Online

Remove-MailboxFolderPermission

Exchange Online ExchangeOnlineManagement Remove-*

Remove folder-level permissions for users in mailboxes.

Quick start script

# Remove-MailboxFolderPermission — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-MailboxFolderPermission
$before | Format-List

# 3. Make the change (dry run first)
Remove-MailboxFolderPermission -Identity <MailboxFolderIdParameter> -User <MailboxFolderUserIdParameter> -WhatIf
Remove-MailboxFolderPermission -Identity <MailboxFolderIdParameter> -User <MailboxFolderUserIdParameter>

# 4. Verify and diff
$after = Get-MailboxFolderPermission
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax — 3 parameter sets

Default

Remove-MailboxFolderPermission [-Identity] <MailboxFolderIdParameter> -User <MailboxFolderUserIdParameter>
 [-Confirm]
 [-DomainController <Fqdn>]
 [-WhatIf]
 [<CommonParameters>]

Identity

Remove-MailboxFolderPermission [-Identity] <MailboxFolderIdParameter> -User <MailboxFolderUserIdParameter>
 [-Confirm]
 [-Force]
 [-SendNotificationToUser <Boolean>]
 [-WhatIf]
 [<CommonParameters>]

ResetDelegateUserCollection

Remove-MailboxFolderPermission [-Identity] <MailboxFolderIdParameter> [-ResetDelegateUserCollection]
 [-Confirm]
 [-Force]
 [-SendNotificationToUser <Boolean>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (8)

Parameter	Type	Required	What it controls
-Identity	MailboxFolderIdParameter	yes	The Identity parameter specifies the target mailbox and folder. The syntax is `Mailbox:\Folder`. For the value of Mailbox, you can use any value that uniquely identifies the mailbox. For example:
-User	MailboxFolderUserIdParameter	yes	The User parameter specifies the mailbox, mail user, or mail-enabled security group (security principal) that's granted permission to the mailbox folder.
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-DomainController	Fqdn		This parameter is available only in on-premises Exchange.
-Force	SwitchParameter		This parameter is available only in the cloud-based service.
-ResetDelegateUserCollection	SwitchParameter		The ResetDelegateUserCollection switch forces the removal of the LocalFreeBusy or the PR_FREEBUSY_ENTRYIDs files in case of corruption. You don't need to specify a value with this switch.
-SendNotificationToUser	Boolean		This parameter is available only in the cloud-based service.
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.