Get mailboxes permissions via EWS Exchange Web Services

Question

Hello,

I want to get who users that have the Send-As and Full-Access permissions on a mailbox. I can only access to the Exchange server through Exchange Web Servies.

I have already a powershell script who permits me to access to the Exchange via EWS. But I haven't found the function to get all the permissions.

Thanks a lot.

Answer 1

EWS is a Mailbox access API so it can only be used to get the ACL's on a particular Mailbox Folder or Mailbox delegate permissions.

The DACL for the Mailbox that controls Mailbox access eg  FullAccess etc and also SendAs permissions (which is the AD DACL) can only be access either via Remote Powershell and the Exchange Management Shell cmdlets (this is the recommended/supported method) or directly via LDAP accessing the AD object.

EWS is not an API that you can use to adminster an Exchange Mailbox/Server for this you should use the Exchange Management Shell.

Cheers
Glen