How to revoke recipient permission from shared mailbox in offic 365?

Today, I'd like to share how to revoke recipient permission from shared mailbox in office 365.

Powershell Syntax for this taks is as below,

Revoke Full Access permissions for Shared Mailbox
Remove-MailboxPermission <Shared Mailbox Name or Full e-mail address> -User  -AccessRights FullAccess

Revoke Send As permissions for Shared Mailbox
Remove-RecipientPermission  -AccessRights SendAs -Trustee  

For example, I want to revoke the Full & Send As permission from helpdesk@ictformyanmar.com that given from technical-support@ictformyanmar.com before.
Before revoke those permissions, I'll check effected permission on technical-support@ictformyanmar.com to ensure.
Use below powershell command to check the effected permission,


To display Full Access permissions for Shared Mailbox
Get-Mailboxpermission "Technical Support"
(or)
Get-Mailboxpermission technical-support@ictformyanmar.com

To display Send As permissions for Shared Mailbox
Get-RecipientPermission "Technical Support"
(or)
Get-RecipientPermission technical-support@ictformyanmar.com

After checked and ensured the granted permissions, I'm going to revoke the permissions by using following powershell commands,

Remove-MailboxPermission "Technical Support" -User "Help Desk" -AccessRights FullAccess
(or)
Remove-MailboxPermission technical-support@ictformyanmar.com -User helpdesk@ictformyanmar.com -AccessRights FullAccess

Press Enter to confirm changed effect if below promt come out,

Confirm
Are you sure you want to perform this action?
Removing mailbox permission "Technical Support" for user "Help Desk" with access
rights "'FullAccess'".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"):


Remove-RecipientPermission "Technical Support"  -AccessRights SendAs -Trustee  "Help Desk"
(or)
Remove-RecipientPermission technical-support@ictformyanmar.com -AccessRights SendAs -Trustee  helpdesk@ictformyanmar.com

Press Enter to confirm changed effect if below promt come out,

Confirm
Are you sure you want to perform this action?
Removing recipient permission 'SendAs' for user or group 'Help Desk' from recipient
'Technical Support'.
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"):

To ensure revoke permission changed effect, please use below powershell commands.

To display Full Access permissions for Shared Mailbox
Get-Mailboxpermission "Technical Support"
(or)
Get-Mailboxpermission technical-support@ictformyanmar.com

To display Send As permissions for Shared Mailbox
Get-RecipientPermission "Technical Support"
(or)
Get-RecipientPermission technical-support@ictformyanmar.com

I've attached three sample photos in sequence (Before Revoke Permissions, Revoking Permissions and After Revoked Permissions) for your reference.





OK. That's the way to revoke the granted permission of shared permission from recipient.

I'll write about Inheritance Type that related with Group if I've time.

May you all be happy.
(Be knowledgeable, pass it on then)

Post a Comment