Why is the InheritanceType option used, and what does it do? How can I check if it works correctly, and could you explain the properties with examples: The more information about the below properties : None All (this is the default value) Children Descendents [sic] SelfAndChildren I have an idea about the All parameter in InheritanceType , but I don’t understand the other parameters like ( Children , Descendants, SelfAndChildren and None ) . Could you explain those?

Hello, @ Ajay m , Welcome to the Microsoft Q&A platform! Based on your description, I understand that you want To more Understand the InheritanceType in Mailbox Permission and have a better comprehension of the properties under its options. InheritanceType is typically used in contexts like security settings, configuration options, or data models where properties or permissions can be inherited from a parent entity to child entities. Here’s a breakdown of the different InheritanceType options: 1.None Description: This means no inheritance occurs. The properties or permissions are only applied to the entity itself and not passed down to any child entities. Example: If you set a permission at a folder level with InheritanceType.None, the subfolders and files within that folder won’t inherit those permissions. 2.All (Default value) Description: This means that all entities, including the entity itself and all of its descendants, inherit the properties or permissions. Example: If a file directory has permissions set with InheritanceType.All, all files and subfolders within that directory will inherit the same permissions. 3.Children Description: This means that only the immediate children of the entity inherit the properties or permissions, but not the entity itself or any further descendants. Example: If a folder has permissions set with InheritanceType.Children, only the files and folders immediately within it will inherit the permissions; subfolders within subfolders will not. 4.Descendants Description: This means that all entities beneath the current entity (i.e., children and their children, and so on) will inherit the properties or permissions, but not the entity itself. Example: If a root folder has permissions set with InheritanceType.Descendants, all subfolders and files at any level below the root folder will inherit those permissions, but the root folder itself will not. 5.SelfAndChildren Description: This means that the entity itself and its immediate children inherit the properties or permissions, but not the deeper descendants. Example: If a folder has permissions set with InheritanceType.SelfAndChildren, the folder itself and the files/folders immediately within it will inherit the permissions. Subfolders within subfolders will not. As for how to check if InheritanceType works correctly, I recommend that you use the Get-MailboxPermission cmdlet to retrieve permissions on a mailbox. For specific commands and operations, you can refer to this document: <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fexchange%2Fget-mailboxpermission%3Fview%3Dexchange-ps&data=05%7C02%7Cv-jilzhang%40microsoft.com%7Cbed3b2f64e9e4e50e09008dcc0148ca0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638596441737382504%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=XhFmSyMOau3KlF%2FDiHuRQr6Yv75Z2WyGDfGVE%2FxHzFs%3D&reserved=0" rel="ugc nofollow">Get-MailboxPermission (ExchangePowerShell) | Microsoft Learn . Please feel free to contact me if you have any queries. If my reply is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding. Best Wishes, Alex Zhang

To more Understand the InheritanceType in Mailbox Permissions

Ajay m 0

Why is the InheritanceType option used, and what does it do? How can I check if it works correctly, and could you explain the properties with examples:

The more information about the below properties :

None
All (this is the default value)
Children
Descendents [sic]
SelfAndChildren

User's image

I have an idea about the All parameter in InheritanceType, but I don’t understand the other parameters like (Children ,Descendants,SelfAndChildren and None). Could you explain those?

1 answer

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-08-19T06:12:45.85+00:00

Hello, @Ajay m,

Welcome to the Microsoft Q&A platform!

Based on your description, I understand that you want To more Understand the InheritanceType in Mailbox Permission and have a better comprehension of the properties under its options.

InheritanceType is typically used in contexts like security settings, configuration options, or data models where properties or permissions can be inherited from a parent entity to child entities. Here’s a breakdown of the different InheritanceType options:

1.None

Description: This means no inheritance occurs. The properties or permissions are only applied to the entity itself and not passed down to any child entities.

Example: If you set a permission at a folder level with InheritanceType.None, the subfolders and files within that folder won’t inherit those permissions.

2.All (Default value)

Description: This means that all entities, including the entity itself and all of its descendants, inherit the properties or permissions.

Example: If a file directory has permissions set with InheritanceType.All, all files and subfolders within that directory will inherit the same permissions.

3.Children

Description: This means that only the immediate children of the entity inherit the properties or permissions, but not the entity itself or any further descendants.

Example: If a folder has permissions set with InheritanceType.Children, only the files and folders immediately within it will inherit the permissions; subfolders within subfolders will not.

4.Descendants

Description: This means that all entities beneath the current entity (i.e., children and their children, and so on) will inherit the properties or permissions, but not the entity itself.

Example: If a root folder has permissions set with InheritanceType.Descendants, all subfolders and files at any level below the root folder will inherit those permissions, but the root folder itself will not.

5.SelfAndChildren

Description: This means that the entity itself and its immediate children inherit the properties or permissions, but not the deeper descendants.

Example: If a folder has permissions set with InheritanceType.SelfAndChildren, the folder itself and the files/folders immediately within it will inherit the permissions. Subfolders within subfolders will not.

As for how to check if InheritanceType works correctly, I recommend that you use the Get-MailboxPermission cmdlet to retrieve permissions on a mailbox. For specific commands and operations, you can refer to this document: Get-MailboxPermission (ExchangePowerShell) | Microsoft Learn.

Please feel free to contact me if you have any queries. If my reply is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding.

Best Wishes,

Alex Zhang
Please sign in to rate this answer.
Ajay m 0 Reputation points

2024-08-19T08:57:27.9766667+00:00

Thank u @Alex Zhang-MSFT

When setting mailbox permissions, if you configure the AccessRights to FullPermission and set the inheritance type to "children" or "descendants," it does not seem to work. Specifically, even if we grant Full Permission access to a user, They are unable to access it. Why is that?

1)Its Add mailbox

2)open another mailbox

For example, if User1 has FullPermission and the inheritance type is set to "All" or "None," and then you grant permissions to User2, User2 should be able to access User1's mailbox. However, if you set the inheritance type to "Children" or "Descendants," User2 cannot open User1's mailbox. Why is that?

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-08-20T06:03:39.59+00:00

Hello, @Ajay m,

For the problem you are experiencing, I will provide you with some possible causes and solutions.

"Children" or "Descendants" usually only affect subfolders or items at a specific level, and do not include the main mailbox itself. Therefore, when you set the inheritance type to Children or Descendants, the permissions may not be applied directly to the primary mailbox. To ensure that User2 has access to User1's entire mailbox, you must set permissions directly on User1's main mailbox.

In order to solve your problem, I suggest you follow the steps I provide below.

1.Open PowerShell and enter the following command, which will grant User2 full access to User1's main mailbox, including both “Children” and “Descendants“.

2.Continue to enter the following command in PowerShell to confirm that the configured permission list contains an entry for User2 and that the access rights and inheritance type are set correctly.

3.Wait a period of time after changing the permissions, or force a refresh of the permission settings to verify that the permissions take effect by restarting the service or logging back in to your mailbox.

With the above steps and checks, you should be able to resolve the issue where User2 can't access User1's mailbox. Please feel free to contact me if you have any queries

If my reply is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding.

Best Wishes,

Alex Zhang

Ajay m 0 Reputation points

2024-08-20T06:38:44.3966667+00:00

Thank you @Alex Zhang-MSFT

"you’ve set the inheritance type to 'All' and granted full permissions, so user 1’s mailbox can be opened.

but my question is:

why can't user 1’s mailbox be accessed when the inheritance type is set to 'Children' or 'Descendants'?"

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-08-21T05:21:57.7266667+00:00

Hello, @Ajay m,

I am sorry for misunderstanding your question and I'll explain why User2 can't access User1's mailbox when the inheritance type is set to “Children” or “Descendants”.

When you grant permissions to User2 with inheritance type ‘Children’, User2 will only get permissions to the direct descendants of User1's mailbox (e.g., folders within the mailbox), but not to the mailbox itself, so he can't open the mailbox. When you grant permissions to User2 with inheritance type ‘Descendants’, User2 will inherit permissions for all descendants (e.g. items in a subfolder) of User1's mailbox, but not for the mailbox itself, thus preventing access to open the mailbox.

In a nutshell, ‘children’ and ‘descendants’ are permissions assigned to folders in a mailbox, and the prerequisite for a user to be able to manipulate a folder is to open the mailbox, and in order to open the mailbox you have to set 'All' permissions on it, just like you want to open your bedroom door on the condition that you open your home door. The 'All' permission ensures that User2 has access to User1's mailbox and can open the mailbox normally.

I hope my explanation has answered your query. If my reply is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding.

Best Wishes,

Alex Zhang

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-08-23T02:03:36.0133333+00:00

Hello, @Ajay m,

If you need further help, please feel free to reply this post directly so we will be notified to follow it up. If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang

Alex Zhang-MSFT 945 Reputation points Microsoft Vendor

2024-08-27T00:43:42.7133333+00:00

Hello, @Ajay m,

Any updates so far? If you have solved your problem, could you share with us? Maybe it will help more people with similar problems. Don't forget to mark it as answer, this will be easy for other community members to find the useful one.

Best Wishes,

Alex Zhang
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.