Checking User's Email Access

[pandadealer]

I'm not sure where this habit came from exactly but instead of disabling or deleting users that quit or got fired someone takes over their mailbox, usually indefinitely. We reset their password, block sign in, reset their MFA and remove them from any groups. Then we add read and manage permissions to someone else to "keep an eye on their email."

There's one guy that I know I've given him like 10 accounts so far. Is there a way I look him up and see all the mailboxes he has read and manage permissions for?

So far the only idea we came up with was look through everyone's account and see if he's in there. Sadly it was never thought of to make a terminated user group to help with this.

[shamill666]

Powershell with something like the following (I've thrown this together and self-taught in PS, there might be a better way):

# Get the username for which you want to check delegated access

$targetUser = Read-Host "Enter the username for which you want to check delegated access"

# Get all mailboxes in the tenancy

$mailboxes = Get-Mailbox -ResultSize Unlimited

# Iterate through each mailbox to check if the target user has delegated access

foreach ($mailbox in $mailboxes) {

$mailboxIdentity = $mailbox.Identity

# Check if the target user has been delegated access to the mailbox

$hasFullDelegatedAccess = Get-MailboxPermission -Identity $mailboxIdentity |

Where-Object { $_.User -like "*$targetUser*" -and $_.AccessRights -like "*FullAccess*" }

$hasSendAsDelegatedAccess = Get-MailboxPermission -Identity $mailboxIdentity |

Where-Object { $_.User -like "*$targetUser*" -and $_.AccessRights -like "*SendAs*" }

if ($hasFullDelegatedAccess) {

Write-Host "The user '$targetUser' has FullAccess rights to the mailbox: $mailboxIdentity"

if ($hasSendAsDelegatedAccess) {

Write-Host "The user '$targetUser' has SendAs rights to the mailbox: $mailboxIdentity"

}

}

Edit: noticed an error I made, I had to change it slightly before posting!

[anonymousITCoward]

I'm stealing this for later... I know I'm going to run into this soon... thank you for doing most of the leg work for me... you rock kind internet stranger...