Get-EXOMailboxPermission

Use Get-EXOMailboxPermission to inspect mailbox permissions — User, AccessRights, IsInherited and Deny together.

Command 1 min read Windows PowerShell 5.1 and PowerShell 7

Documentation: Microsoft Learn — PowerShell module reference

Written and tested by Dhrub Bharali · Updated 02 October 2026

Common usage

Get-EXOMailboxPermission -Identity user@example.test -ErrorAction Stop

This is a usage example, not the complete parameter-set reference. Follow Microsoft Learn below for supported parameters and version details.

See the command anatomy

Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.

Get-EXOMailboxPermission -Identity user@example.test -ErrorAction Stop

Stage 1Get-EXOMailboxPermission-Identity -ErrorAction

Try it

Windows PowerShell

PowerShell example · browser support is limited.

Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.

Command

Interactive simulation · fictional data

Examples

Get-EXOMailboxPermission -Identity user@example.test

1Get-EXOMailboxPermission -Identity user@example.test -ErrorAction Stop

Show reference output

Sample output · fictional data, shaped like the real thing

Identity           User                 AccessRights  IsInherited  Deny
--------           ----                 ------------  -----------  ----
user@example.test  EXAMPLE\Helpdesk  {FullAccess}  False        False

Practical use and troubleshooting

Practical scenario: Use Get-EXOMailboxPermission when you need to inspect mailbox permissions — User, AccessRights, IsInherited and Deny together. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.

Common error and fix: A permission inventory may be misread if inherited or denied entries are ignored. Inspect IsInherited, Deny and AccessRights and resolve the intended mailbox before describing the effective access. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.

See also: Get-EXOMailbox. Get-EXOMailboxPermission reads mailbox access permissions; Get-EXOMailbox reads mailbox attributes. FullAccess, Send As and Send on Behalf are separate permission concepts and require the appropriate queries. Read the linked command before substituting it; similar names do not imply identical inputs or output.

Get-EXOMailboxPermission reference on Microsoft Learn

Recap

Get-EXOMailboxPermission Use Get-EXOMailboxPermission to inspect mailbox permissions — User, AccessRights, IsInherited and Deny together.

Next: Get-InboxRule