Powershell command remove access for exchange365

steve-elc · 2020-02-27T23:07:18.000Z

Hello,

I have a user with author rights to multiple mailbox calendars to add and remove appointments. This was added by running this command in powershell
“Add-MailboxFolderPermission -Identity principal@contoso.com:\Calendar -User reception@contoso.com -AccessRights Author”. But for some reason she has no ability to delete appointments. I had another user with a similar issue and removing access and adding again resolved but this was 2yrs ago.

I have ran “Remove-MailboxFolderPermission -Identity principal@contoso.com -User reception@contoso.com -AccessRights Author -InheritanceType All"and get the below error” and got the following error.
"A parameter cannot be found that matches parameter name ‘AccessRights’.

CategoryInfo : InvalidArgument: ( [Remove-MailboxFolderPermission], ParameterBindingException
FullyQualifiedErrorId : NamedParameterNotFound,Remove-MailboxFolderPermission
PSComputerName : outlook.office365.com"

I can see from this that my issue is with the word AccessRights. I know this is long but I am trying to include as much detail as possible to resolve the not being able to delete calendar entries for my user. I cannot figure out why she cannot delete entries from all users that she is connected too.

TIA

Neally · 2020-02-27T23:12:11.000Z

If you remove permissions, you remove them all, doesn’t matter if it was given author or owner or whatever.

learn.microsoft.com

Remove-MailboxFolderPermission (ExchangePowerShell)

You can't use this cmdlet to selectively remove permissions from a user on a mailbox folder. The cmdlet removes all permissions that are assigned to the user on the specified folder. To modify the permissions that are assigned to the user on a...

So just run it like so and then try to add it again

Remove-MailboxFolderPermission -Identity principal@contoso.com -User reception@contoso.com

Also, Author can not delete ALL items, only their own items.

Author:CreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems

learn.microsoft.com

Set-MailboxFolderPermission (ExchangePowerShell)

In Exchange Online PowerShell, if you don't use the SendNotificationToUser or SharingPermissionFlags parameters, there are no changes to the functionality of the cmdlet. For example, if the user is an existing delegate, and you change their...

steve-elc · 2020-02-27T23:38:22.000Z

Hello @alexw ,

Tried your suggestion and got the below.

There is no existing permission entry found for user: reception.

CategoryInfo : NotSpecified: ( [Remove-MailboxFolderPermission], UserNotFoundInPermissionEntryExcepti
on
FullyQualifiedErrorId : [Server=ME3P282MB0771,RequestId=5b330c0f-40b2-49c9-9ce0-61778f7782b9,TimeStamp=28/02/202
0 12:14:45 AM] [FailureCategory=Cmdlet-UserNotFoundInPermissionEntryException] 401F1B62,Microsoft.Exchange.Managem
ent.StoreTasks.RemoveMailboxFolderPermission
PSComputerName : outlook.office365.com

Neally · 2020-02-27T23:40:10.000Z

Well that means there is no permissions set. Try to run your set permissions code?
That’s possibly why the user had no rights?

Neally · 2020-02-27T23:42:23.000Z

Also…

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

steve-elc · 2020-02-28T00:29:45.000Z

Cheers I will remember that in future. I am really confused as I try to give user rights to principal and get “An existing permission entry was found for user”. I use the remove command to clear all and get “There is no existing permission entry found for user”.

Sorry to be a nuisance I am very new to powershell. I like it when it works for me but lose the love when I am clueless to errors.

Neally · 2020-02-28T00:35:01.000Z

Can you post your error messages? In the OP you said you couldn’t remove it?

steve-elc · 2020-02-28T02:55:02.000Z

Hi there, have checked my lines and I was missing :\calendar after the email address. I have now removed reception from all test accounts and readded with editor permissions.

Now I need to wait till Monday to see if this worked. Thank you @Neally for your time and patience.

DoctorDNS · 2020-02-29T09:48:14.000Z

Glad it worked. Please ensure you mark best answer.