How to tell what permissions a user has been given to a shared mailbox

Question

How to tell what permissions a user has been given to a shared mailbox

Andrew Earl 105

Hi, in Outlook I can share my inbox with another user and grant them read access or write access.

When using graph API, is there a way to tell what permissions a user has to a specific shared inbox, e.g. no access, read only, read and write?

I am using delegated permissions.

Thanks

Accepted answer

1 additional answer

Your answer

Answer 1

Andy David - MVP 157.8K MVP Volunteer Moderator

You will need to use Exchange powershell:

https://learn.microsoft.com/en-us/powershell/module/exchange/get-mailboxfolderpermission?view=exchange-ps

Graph does not yet support this.

Answer 2

Hello Andrew Earl,

Greetings from Microsoft Support!

Currently, there isn’t a direct API call in Microsoft Graph to explicitly check the permissions a user has on a shared inbox. However, you can infer the permissions by attempting specific actions and handling the responses:

The Signed User should be the individual whose mailbox access is being verified.

The UserId should be the identifier of the user with a shared inbox.

Read Access: Try to read messages from the shared inbox.
```
   GET /users/{UserId}/mailFolders('Inbox')/messages
```
If successful, the user has at least read access.
Write Access: Try to create or modify a message in the shared inbox.
```
   POST /users/{UserId}/mailFolders('Inbox')/messages
```
If successful, the user has write access.
No Access: If both actions fail, the user likely has no access.

These steps allow you to determine the level of access indirectly.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Share via

How to tell what permissions a user has been given to a shared mailbox

1 additional answer

Your answer