Link to home
Start Free TrialLog in
Avatar of TJOSY
TJOSYFlag for United Arab Emirates

asked on

Listing "send as", "send on behalf" and "Full access" permission for list of mail enabled AD users.

Hi Support,

We have a excel sheet with approx 300 users with below information:-
1) username 2) NTlogin 3) Full name 4) email address.

Many of the user accounts are assigned with "send as", "send on behalf" and "Full access" permission in exchange. Is it possible to export these permissions for each respective users in a CSV or XLS format.

We are using Exchange 2013 CU8.
Avatar of David Sankovsky
David Sankovsky
Flag of Israel image

Your question is ambiguous,
Are you trying to know how can send on behalf of the listed mailbox?
or what permissions does the username in question has over other mailboxes?
Avatar of TJOSY

ASKER

You are right. my requirement is to have the details of users who have "send on behalf", "full permission" and "send as" (if permission assigned) permission on each mailbox listed in the excel sheet. it is not necessary that all user have this delegated permission, but to list those mailbox which is delegated to other users.

Please note, im able to extract this information for one user, however my requirement is to have it available for list of users.

attached the sample format in XLS. I have marked cells in YELLOW for expected results.
delegate-permission.xlsx
ASKER CERTIFIED SOLUTION
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of TJOSY

ASKER

Thank you..  Also I got below script which will help us to export the results directly without source csv file..

for EXPORTING Full mailbox permission:
Get-Mailbox -OrganizationalUnit “<OU path>” | Get-MailboxPermission | where { ($_.AccessRights -eq “FullAccess”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”) } | Export-Csv -path C:\TEMP\exch.csv –NoTypeInformation

for EXPORTING send as permission:
Get-Mailbox -OrganizationalUnit “<OU path>” -ResultSize unlimited | Get-ADPermission | Where {$_.ExtendedRights -like “Send-As” -and $_.User -notlike “NT AUTHORITY\SELF” -and $_.Deny -eq $false} | Export-Csv -path C:\TEMP\sendas.csv –NoTypeInformation