List Mailboxes Users Can Access

2025-12-17 16:35:19 +00:00 · 2022-04-27 18:44:30 +05:30 · 2022-04-27 18:44:30 +05:30 · 5a8eb11344
commit 5a8eb11344
parent 97826ff919
1 changed files with 161 additions and 0 deletions
--- a/Access/MailboxesUserCanAccess.ps1
+++ b/Access/MailboxesUserCanAccess.ps1
@ -0,0 +1,161 @@
+<#
+=============================================================================================
+Name:           List all Exchange Online mailboxes users can access
+Version:        1.0
+Website:        m365scripts.com
+Script by:      M365Scripts Team
+For detailed script execution: https://m365scripts.com/exchange-online/URL Sluglist-exchange-online-mailboxes-user-has-access-using-powershell
+============================================================================================
+#>
+Param
+(
+    [Parameter(Mandatory = $false)]
+    [string]$UserName = $NULL,
+    [string]$Password = $NULL,
+    [string]$UPN = $NULL,
+    [string]$CSV = $NULL,
+    [switch]$FullAccess,
+    [switch]$SendAs,
+    [switch]$SendOnBehalf
+)
+function Connect_Exo {
+    #Check for EXO v2 module inatallation
+    $Module = Get-Module ExchangeOnlineManagement -ListAvailable
+    if ($Module.count -eq 0) { 
+        Write-Host "Exchange Online PowerShell V2 module is not available"  -ForegroundColor yellow  
+        $Confirm = Read-Host "Are you sure you want to install module? [Y] Yes [N] No" 
+        if ($Confirm -match "[yY]") { 
+            Write-host "Installing Exchange Online PowerShell module"
+            Install-Module ExchangeOnlineManagement -Repository PSGallery -AllowClobber -Force
+        } 
+        else { 
+            Write-Host EXO V2 module is required to connect Exchange Online.Please install module using Install-Module ExchangeOnlineManagement cmdlet. 
+            Exit
+        }
+    } 
+    Write-Host Connecting to Exchange Online...
+    #Importing Module by default will avoid the cmdlet unrecognized error 
+    Import-Module ExchangeOnline -ErrorAction SilentlyContinue -Force
+    #Storing credential in script for scheduling purpose/ Passing credential as parameter - Authentication using non-MFA account
+    if (($UserName -ne "") -and ($Password -ne "")) {
+        $SecuredPassword = ConvertTo-SecureString -AsPlainText $Password -Force
+        $Credential = New-Object System.Management.Automation.PSCredential $UserName, $SecuredPassword
+        Connect-ExchangeOnline -Credential $Credential
+    }
+    else {
+        Connect-ExchangeOnline
+    }
+    Write-Host "ExchangeOnline PowerShell module is connected successfully"
+}
+function FullAccess {
+    $MB_FullAccess = $global:Mailbox | Get-MailboxPermission -User $UPN -ErrorAction Stop | Select-Object Identity
+    if ($MB_FullAccess.count -ne 0) {
+        $ExportResult = @{'User Name' = $Identity; 'AccessType' = "Full Access"; 'Delegated Mailbox Name' = $MB_FullAccess.Identity -join (",") }
+    }
+    else {
+        $ExportResult = @{'User Name' = $Identity; 'AccessType' = "Full Access"; 'Delegated Mailbox Name' = "-" }
+    }
+    $ExportResults = New-Object PSObject -Property $ExportResult
+    $ExportResults | Select-object 'User Name', 'AccessType', 'Delegated Mailbox Name' | Export-csv -path $global:ExportCSVFileName -NoType -Append -Force
+}
+function SendAs {
+    $MB_SendAs = Get-RecipientPermission -Trustee $UPN -ErrorAction Stop | Select-Object Identity
+    if ($MB_SendAs.count -ne 0) {
+        $ExportResult = @{'User Name' = $Identity; 'AccessType' = "Send As"; 'Delegated Mailbox Name' = $MB_SendAs.Identity -join (",") }
+    }
+    else {
+        $ExportResult = @{'User Name' = $Identity; 'AccessType' = "Send As"; 'Delegated Mailbox Name' = "-" }
+    }
+    $ExportResults = New-Object PSObject -Property $ExportResult
+    $ExportResults | Select-object 'User Name', 'AccessType', 'Delegated Mailbox Name' | Export-csv -path $global:ExportCSVFileName -NoType -Append -Force
+    
+}
+function SendOnBehalfTo {
+    $MB_SendOnBehalfTo = $global:Mailbox | Where-Object { $_.GrantSendOnBehalfTo -match $Identity } -ErrorAction Stop | Select-Object Name
+    if ($MB_SendOnBehalfTo.count -ne 0) {
+        $ExportResult = @{'User Name' = $Identity; 'AccessType' = "Send on Behalf"; 'Delegated Mailbox Name' = $MB_SendOnBehalfTo.Name -join (",") }
+    }
+    else {
+        $ExportResult = @{'User Name' = $Identity; 'AccessType' = "Send on Behalf"; 'Delegated Mailbox Name' = "-" }
+    }
+    $ExportResults = New-Object PSObject -Property $ExportResult
+    $ExportResults | Select-object 'User Name', 'AccessType', 'Delegated Mailbox Name' | Export-csv -path $global:ExportCSVFileName -NoType -Append -Force
+}
+
+
+Connect_Exo 
+$global:ExportCSVFileName = "MailboxesUserHasAccessTo_" + ((Get-Date -format "MMM-dd hh-mm-ss tt").ToString()) + ".csv"
+$global:Mailbox = Get-Mailbox -ResultSize Unlimited
+if (($UPN -ne "")) {
+    $UserInfo = $global:Mailbox | Where-Object { $_.UserPrincipalName -eq "$UPN" } | Select-Object Identity
+    $Identity = $UserInfo.Identity
+    if ($FullAccess.IsPresent) {
+        FullAccess
+    }
+    if ($SendAs.IsPresent) {
+        SendAs
+    }
+    if ($SendOnBehalf.IsPresent) {
+        SendOnBehalfTo
+    }
+    if((($FullAccess.IsPresent) -eq $false) -and (($SendAs.IsPresent) -eq $false) -and (($SendOnBehalf.IsPresent) -eq $false)){
+        FullAccess
+        SendAs
+        SendOnBehalfTo
+    }
+}
+elseif (($CSV -ne "")) {
+    Import-Csv $CSV -ErrorAction Stop | ForEach-Object {
+        $UPN = $_.UPN
+        $UserInfo = $global:Mailbox | Where-Object { $_.UserPrincipalName -eq "$UPN" } | Select-Object Identity
+        $Identity = $UserInfo.Identity
+        Write-Progress "Processing for the Mailbox: $Identity"
+        if ($FullAccess.IsPresent) {
+            FullAccess
+        }
+        if ($SendAs.IsPresent) {
+            SendAs
+        }
+        if ($SendOnBehalf.IsPresent) {
+            SendOnBehalfTo
+        }
+        if((($FullAccess.IsPresent) -eq $false) -and (($SendAs.IsPresent) -eq $false) -and (($SendOnBehalf.IsPresent) -eq $false)){
+            FullAccess
+            SendAs
+            SendOnBehalfTo
+        }
+    }
+}
+else {
+    $MBCount = 0
+    $global:Mailbox | ForEach-Object {
+        $MBCount = $MBCount + 1
+        $UPN = $_.UserPrincipalName
+        $Identity = $_.Identity
+        Write-Progress -Activity "Processing for  : $Identity" -Status "Processing mailbox Count: $MBCount" 
+        if ($FullAccess.IsPresent) {
+            FullAccess
+        }
+        if ($SendAs.IsPresent) {
+            SendAs
+        }
+        if ($SendOnBehalf.IsPresent) {
+            SendOnBehalfTo
+        }
+        if((($FullAccess.IsPresent) -eq $false) -and (($SendAs.IsPresent) -eq $false) -and (($SendOnBehalf.IsPresent) -eq $false)){
+            FullAccess
+            SendAs
+            SendOnBehalfTo
+        }
+    }
+}
+if ((Test-Path -Path $global:ExportCSVFileName) -eq "True") {     
+    Write-Host "The Output file availble in `"$global:ExportCSVFileName`"" -ForegroundColor Green 
+    $prompt = New-Object -ComObject wscript.shell    
+    $userInput = $prompt.popup("Do you want to open output files?", 0, "Open Output File", 4)    
+    if ($userInput -eq 6) {    
+        Invoke-Item "$global:ExportCSVFileName"
+    }  
+}
+Disconnect-ExchangeOnline -Confirm:$false -InformationAction Ignore -ErrorAction SilentlyContinue
+Write-Host "Disconnected active ExchangeOnline session"