Office 365 gives you a free SMTP relay which is excellent for sending emails to…
Reset Office 365 delegate access with PowerShell
How to reset Office 365 delegate access with PowerShell? You have a user that gets an error every time they open their delegate access in Outlook. You already did remove the delegate permissions, but it still gives them problems. How do you ensure that users edit and set their delegate access without problems? Let’s look at how to reset Office 365 delegate permissions with PowerShell.
Table of contents
Introduction
To check the delegate permissions in Outlook, go to File > Account settings > Delegate Access.
There you can see which user and access rights are set.
If you already tried to remove the delegate access from the calendar, recreate the Outlook profile, and the user still can’t add a delegate or remove a delegate, you have two options:
- Download MFCMAPI and remove the delegate access rights
- Reset the delegate access rights with PowerShell
MFCMAPI is great if you have an Exchange on-premises mailbox with this problem. That’s because you can’t use the PowerShell command with on-premises mailboxes. But, if you have a mailbox in Office 365/Microsoft 365, it’s excellent to run one PowerShell command and reset the delegate access rights.
An excellent way to understand more about how to add, edit and remove calendar permissions is to read the article Manage calendar permissions in Office 365 with PowerShell.
How to reset delegate permissions
Go through the steps and reset Office 365 calendar delegate access.
1. Connect to Exchange Online PowerShell
The first step is to connect to Exchange Online PowerShell.
PS C:\> Connect-ExchangeOnline
2. Get delegate permissions
Run the Get-MailboxFolderPermission cmdlet to get the calendar permissions.
PS C:\> Get-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" | ft -auto
FolderName User AccessRights SharingPermissionFlags
---------- ---- ------------ ----------------------
Calendar Default {AvailabilityOnly}
Calendar Rees, Grace {Reviewer}
Calendar Grant, Richard {Editor} Delegate
Calendar Fraser, Max {Editor} Delegate, CanViewPrivateItems
Export the calendar permissions output to CSV file in the C:\temp folder with the name permissions.csv. Create a temp folder if you don’t have one.
PS C:\> Get-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" | Select-Object FolderName,User,AccessRights,SharingPermissionFlags | Export-Csv C:temp\permissions.csv -NTI
Now that you have the output and export for backup, let’s reset Office 365 calendar permissions to their default settings.
3. Reset delegate access
Run the Remove-MailboxFolderPermission cmdlet including the -ResetDelegateUserCollection parameter. Press Y and Enter.
Note: The ResetDelageUserCollection switch will clear any corrupted delegate information from the mailbox. The output will show that it’s resetting the DelegateUserCollection.
PS C:\> Remove-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" -ResetDelegateUserCollection
Confirm
Are you sure you want to perform this action?
Using ResetDelegateUserCollection changes existing calendar Delegate permissions. You will need to re-assign the Delegate flag to these
recipients using Set-MailboxFolderPermission -SharingPermissionFlags Delegate. It is suggested that this ResetDelegateUserCollection
option is only used when you believe there is corruption that is preventing managing calendar permissions.
[Y] Yes [A] Yes to All [N] No [L] No to All [?] Help (default is "Y"): Y
WARNING: Resetting DelegateUserCollection...
WARNING: DelegateUserCollection is reset.
4. Verify delegate access reset
Verify that the SharingPermissionFlags column is empty. It means that it successfully reset the delegate user collection.
PS C:\> Get-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" | ft -auto
FolderName User AccessRights SharingPermissionFlags
---------- ---- ------------ ----------------------
Calendar Default {AvailabilityOnly}
Calendar Rees, Grace {Reviewer}
Calendar Grant, Richard {Editor}
Calendar Fraser, Max {Editor}
5. Set delegate access
Tell the user that they can access their Delegate Access in Outlook and add, remove, or edit the permissions. Another way is to set the delegate permissions back to how it was with the Set-MailboxFolderPermission cmdlet.
In our example, we will set delegate permissions back for both the users.
PS C:\> Set-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" -User "Grant, Richard" -SharingPermissionFlags Delegate -AccessRights Editor
PS C:\> Set-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" -User "Fraser, Max" -SharingPermissionFlags Delegate, CanViewPrivateItems -AccessRights Editor
6. Final delegate access check
The last check confirms that the delegate access is set like it was. Only this time, it’s without any corrupted delegate.
PS C:\> Get-MailboxFolderPermission -Identity "testexo@exoip.com:\Calendar" | ft -auto
FolderName User AccessRights SharingPermissionFlags
---------- ---- ------------ ----------------------
Calendar Default {AvailabilityOnly}
Calendar Rees, Grace {Reviewer}
Calendar Grant, Richard {Editor} Delegate
Calendar Fraser, Max {Editor} Delegate, CanViewPrivateItems
Everything looks great!
Keep reading: Configure permissions in Exchange Hybrid »
Conclusion
You learned how to reset Office 365 delegate access with PowerShell. First, connect to Exchange Online and run the Remove-MailboxFolderPermission cmdlet, including the -ResetDelegateUserCollection parameter. After that, add the delegate permissions back or tell the user they can edit the permissions themself.
Did you enjoy this article? You may also like Manage Teams meeting delegate permission. Don’t forget to follow us and share this article.
This Post Has 0 Comments