We are using following commands to fetch recipient and mailbox permission: **Get-EXORecipientPermission -Identity

While fetching recipient permission while running o365 synchronization, it causes delay of around 63 seconds for every user. However, fetching mailbox permission works without any delay

Ravina Sawant 0

We are using following commands to fetch recipient and mailbox permission:

**Get-EXORecipientPermission -Identity

1 answer

Jarvis Sun-MSFT 10,216 Microsoft Vendor

Hi @Ravina Sawant ,

Thanks for posting in our Q&A forum.

It seems that the issue is specific to one tenant only. I’m not sure what could be causing this issue. However, you can try to check if the issue is caused by the application by running the command on a different application. You can also try to check if there are any issues with the user’s mailbox by running the command on a different mailbox.

I have done my EO test, everything works fine with no delay.

User's image

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Ravina Sawant 0 Reputation points

2023-08-04T21:28:00.92+00:00

Hi @Jarvis Sun-MSFT ,

Yes, this issue is specific to one tenant only. When I asked them to run the command on PowerShell, they were able to fetch the permissions instantly. When they connect to exchange online with app authentication and then fetch recipient permission, then it is taking long time to execute.

I wrote a separate console application where I took tenant name, app ID, certificate and password as input from customer and executed following command :

Get-EXORecipientPermission -Identity <mailid> -ResultSize Unlimited | Select-Object -Property Trustee, AccessRights, AccessControlType, IsInherited

Through standalone console application as well, it is taking time to execute from that particular tenant. Also, it shows following command as unrecognized for that particular tenant which seems to be an issue:

Get-RecipientPermission -Identity <mailid> -ResultSize Unlimited | Select-Object -Property Trustee, AccessRights, AccessControlType, IsInherited

So, basically Get-EXORecipientPermission permission executes with delay and Get-RecipientPermission shows unrecognized when connected to exchange online with app authentication.

There seems to be some issue with app authentication or the tenant configuration that is causing this issue.

Ravina Sawant 0

I am mentioning below the code that I used in standalone console application to reproduce this issue in Customer's environment:

using System.Collections.ObjectModel;  
using System.Management.Automation; 
using System.Management.Automation.Language;  
using System.Management.Automation.Runspaces;  
using System.Security;  
using System.Security.Cryptography.X509Certificates;       

Console.WriteLine("Enter ExchangeOnline module path: ");  var exov2ModulePath = Console.ReadLine();    

Console.WriteLine("Enter certificate path: ");   
var certPath = Console.ReadLine();    

Console.WriteLine("Enter Password:");   
var password = string.Empty;   
ConsoleKey key;  

do {      
var keyInfo = Console.ReadKey(intercept: true);      
key = keyInfo.Key;       
if (key == ConsoleKey.Backspace && password.Length > 0)      {          
Console.Write("\b \b");          
password = password[0..^1];      
}      
else if (!char.IsControl(keyInfo.KeyChar))      
{          
Console.Write("*");          
password += keyInfo.KeyChar;      
}  
}  
while 
(key != ConsoleKey.Enter);    
Console.WriteLine();   
Console.WriteLine("Enter Azure App ID:");   
var AppID = Console.ReadLine();     Console.WriteLine("Enter Tenant name:");   
var TenantName = Console.ReadLine();    Console.WriteLine("Enter user name:");    
var User = Console.ReadLine();     
Console.WriteLine();     
try {      
PowerShell ps = null;      
IAsyncResult getCommandAsyncResult = null;          
 using (SecureString securePassword = new SecureString())      {          
var iss = InitialSessionState.CreateDefault2();                  iss.ExecutionPolicy = Microsoft.PowerShell.ExecutionPolicy.Bypass;                ps = System.Management.Automation.PowerShell.Create(iss);         ps.Runspace = RunspaceFactory.CreateRunspace();         ps.Runspace.Open();          
var exoV2ModulePath = exov2ModulePath;           
if (string.IsNullOrEmpty(exoV2ModulePath) || !System.IO.File.Exists(exoV2ModulePath))          
{              
var exoV2ModuleNotFoundMessage = string.IsNullOrEmpty(exoV2ModulePath) ? "EXO V2 module path was not found in the configuration" :                 string.Format("EXO V2 module was not found under : '{0}'", exoV2ModulePath);              
throw new Exception(exoV2ModuleNotFoundMessage);          
}            
ps.AddScript(string.Format("{0} '{1}'", "Import-Module", exoV2ModulePath));                    
ps.Invoke();          
ps.Commands.Clear();            
foreach (char passwordChar in password)          
{              
securePassword.AppendChar(passwordChar);          
}            
ps.AddCommand("Connect-ExchangeOnline");         ps.AddParameter("CertificateFilePath", certPath);         ps.AddParameter("CertificatePassword", securePassword);         ps.AddParameter("AppId", AppID);          ps.AddParameter("Organization", TenantName);           ps.Invoke();          
ps.Commands.Clear();           
if (ps.InvocationStateInfo.State == PSInvocationState.Completed &&                                 ps.InvocationStateInfo.State != PSInvocationState.Failed && ps.Streams.Error.Count == 0)          
{                                        Console.WriteLine("Executing command Get-EXORecipientPermission...");              
var commands = new List<Command>();              
var cmdGetRecipientPermission = new Command("Get-EXORecipientPermission");             cmdGetRecipientPermission.Parameters.Add("ResultSize", "Unlimited");             cmdGetRecipientPermission.Parameters.Add("Identity", User);             commands.Add(cmdGetRecipientPermission);               
var cmdSelectObject = new Command("Select-Object");              var properties = new List<string>();             properties.Add("Trustee");              properties.Add("AccessRights");             properties.Add("AccessControlType");             properties.Add("IsInherited");             cmdSelectObject.Parameters.Add("Property", properties);             commands.Add(cmdSelectObject);                         foreach (Command command in commands)              
{                  
ps.Commands.AddCommand(command);              
}                         
getCommandAsyncResult = ps.BeginInvoke();                         Console.WriteLine("Started execution for Get-EXORecipientPermission : datetime : " + DateTime.Now);               while (!getCommandAsyncResult.IsCompleted)              
{                  
Thread.Sleep(250);              
}               
PSObject ps1 = new PSObject();              PSDataCollection<PSObject> getCommandOutput = ps.EndInvoke(getCommandAsyncResult);                       Console.WriteLine("Completed execution for Get-EXORecipientPermission : datetime : " + DateTime.Now);               if ((getCommandOutput != null) && (getCommandOutput.Count > 0))             
{                                  
for (int i = 0; i < getCommandOutput.Count; i++)                  {                      
ps1 = getCommandOutput[i];                                                                                                  }              
}                                          ps.Commands.Clear();                                 Console.WriteLine("Executing command Get-RecipientPermission...");             
 commands = new List<Command>();              cmdGetRecipientPermission = new Command("Get-RecipientPermission");             cmdGetRecipientPermission.Parameters.Add("ResultSize", "Unlimited");             cmdGetRecipientPermission.Parameters.Add("Identity", User);             commands.Add(cmdGetRecipientPermission);               cmdSelectObject = new Command("Select-Object");              properties = new List<string>();              properties.Add("Trustee");              properties.Add("AccessRights");             properties.Add("AccessControlType");             properties.Add("IsInherited");             cmdSelectObject.Parameters.Add("Property", properties);             commands.Add(cmdSelectObject);                 
foreach (Command command in commands)              
{                  
ps.Commands.AddCommand(command);              
}                
getCommandAsyncResult = null;              getCommandAsyncResult = ps.BeginInvoke();                            Console.WriteLine("Started execution for Get-RecipientPermission : datetime : " + DateTime.Now);               while (!getCommandAsyncResult.IsCompleted)              
{                  
Thread.Sleep(250);              
}               
PSObject ps2 = new PSObject();               getCommandOutput = ps.EndInvoke(getCommandAsyncResult);             getCommandOutput = ps.EndInvoke(getCommandAsyncResult);                           if ((getCommandOutput != null) && (getCommandOutput.Count > 0))             
{                   
for (int i = 0; i < getCommandOutput.Count; i++)                  {                      
ps2 = getCommandOutput[i];                                                                               }              
}                                         ps.Commands.Clear();                  Console.WriteLine("Executing command Get-EXOMailBoxPermission...");             
commands = new List<Command>();              cmdGetRecipientPermission = new Command("Get-EXOMailBoxPermission");             cmdGetRecipientPermission.Parameters.Add("ResultSize", "Unlimited");             cmdGetRecipientPermission.Parameters.Add("Identity", User);             commands.Add(cmdGetRecipientPermission);               cmdSelectObject = new Command("Select-Object");              properties = new List<string>();              properties.Add("User");              properties.Add("AccessRights");              properties.Add("Deny");              properties.Add("IsInherited");             cmdSelectObject.Parameters.Add("Property", properties);             commands.Add(cmdSelectObject);                 
foreach (Command command in commands)              
{                  
ps.Commands.AddCommand(command);              
}              
getCommandAsyncResult = null;              getCommandAsyncResult = ps.BeginInvoke();                       Console.WriteLine("Started execution for EXOMailBoxPermission : datetime : " + DateTime.Now);              while (!getCommandAsyncResult.IsCompleted)              
{                  
Thread.Sleep(250);              
}                        
PSObject ps3 = new PSObject();              getCommandOutput = ps.EndInvoke(getCommandAsyncResult);             getCommandOutput = ps.EndInvoke(getCommandAsyncResult);                          Console.WriteLine("Completed execution for EXOMailBoxPermission : datetime : " + DateTime.Now);              if ((getCommandOutput != null) && (getCommandOutput.Count > 0))             
{                   
for (int i = 0; i < getCommandOutput.Count; i++)                  {                      
ps3 = getCommandOutput[i];                                        }               }                              Console.ReadLine();          
}          
else          
{              
Console.ReadLine();          
}      
}       
ps.Runspace.Close();   
}   
catch (Exception ex)  {          Console.WriteLine(ex.Message);      
Console.ReadLine();   
}

Share via

While fetching recipient permission while running o365 synchronization, it causes delay of around 63 seconds for every user. However, fetching mailbox permission works without any delay

1 answer

Your answer