Share via

Managed Email 2007::GetMailboxPermission

  • Article

Lists the permissions on a mailbox.

Arguments

Input Arguments Required Description

<preferredDomainController>

Yes

This parameter specifies a unique name for the accepted domain object.

<user>

Yes

A valid LDAP path of the user object.

<owner>

No

A valid LDAP path of the user object.

<trustee>

No

A valid LDAP path of the user object.
Output Arguments Description

<permissions>

Collection of Mailbox permissions.

<permissions/ permission>

Details of a permission associated with a Mailbox.

<permissions/ permission/ identity>

The Active Directory Object ID or a string that represents the GUID, distinguished name, domain or account, user principal name (UPN), legacy Exchange distinguished name, Simple Mail Transfer Protocol (SMTP) address, or alias.

<permissions/ permission/ trustee>

tbs

<permissions/ permission/ owner>

The owner.

<permissions/ permission/ deny>

Deny permissions to the mailbox for the specified user.

<permissions/ permission/ isInherited>

Indicates if access right is inherited.

<permissions/ permission/ isValid>

tbs

<permissions/ permission/ inheritanceType>

Specifies whether permissions are inherited to folders within the mailbox. Enum

  • None

  • All

  • Descendents

  • SelfAndChildren

  • Children

<permissions/ permission/ accessRights>

Collection for access rights.

<permissions/ permission/ accessRights/ value>

Specifies the rights applied to the mailbox. Enum

  • ChangeOwner

  • ChangePermission

  • DeleteItem

  • ExternalAccount

  • FullAccess

  • ReadPermission

Remarks

Security

Caller must be at least a member of role: userCreators.

Sample Code

Example XML Request

<request> 
  <data> 
    <!--The domain controller to use for Active Directory actions.--> 
    <preferredDomainController>AD01.Fabrikam.Com</preferredDomainController> 
    <!--The LDAP path of an existing mailbox.--> 
    <user>LDAP://CN=johnc@alpineskihouse.com,OU=AlpineSkiHouse,OU=ConsolidatedMessenger,OU=Hosting,DC=Fabrikam,DC=Com</user> 
    <!--Specifies the mailbox that will get permissions added.--> 
    <owner>false</owner> 
    <!--Specifies the mailbox that will get permissions added.--> 
    <trustee>LDAP://CN=johnc@alpineskihouse.com,OU=AlpineSkiHouse,OU=ConsolidatedMessenger,OU=Hosting,DC=Fabrikam,DC=Com</trustee> 
  </data> 
  <procedure> 
    <execute namespace="Managed Email 2007" procedure="GetMailboxPermission" impersonate="1"> 
      <before source="data" sourcePath="preferredDomainController" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="user" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="owner" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="trustee" destination="executeData" mode="move" /> 
      <after source="executeData" destination="data" mode="merge" /> 
    </execute> 
  </procedure> 
</request>

Example XML Response

<response> 
  <data> 
    <!--Collection of Mailbox permissions.--> 
    <permissions> 
      <!--Details of a permission associated with a Mailbox.--> 
      <permission> 
        <!--The Active Directory Object ID or a string that represents the GUID, distinguished name, domain or account, user principal name (UPN), legacy Exchange distinguished name, Simple Mail Transfer Protocol (SMTP) address, or alias.--> 
        <identity>LDAP://CN=johnc@AlpineSkiHouse.com,OU=AlpineSkiHouse,OU=ConsolidatedMessenger,OU=Hosting,DC=Fabrikam,DC=Com</identity> 
        <!--Specifies the user assciated with the permission item.--> 
        <user>LDAP://CN=kima@AlpineSkiHouse.com,OU=AlpineSkiHouse,OU=ConsolidatedMessenger,OU=Hosting,DC=Fabrikam,DC=Com</user> 
        <!--Owner.--> 
        <owner>NT AUTHORITY\SELF</owner> 
        <!--Deny permissions to the mailbox for the specified user.--> 
        <deny>false</deny> 
        <!--Indicates if access right is inherited.--> 
        <isInherited>false</isInherited> 
        <!--Indicates whether the Ace Presentation Object is valid.--> 
        <isValid>true</isValid> 
        <!--Specifies whether permissions are inherited to folders within the mailbox.--> 
        <inheritanceType>All</inheritanceType> 
        <!--Collection of Access Rights.--> 
        <accessRights> 
          <!--Specifies the rights applied to the mailbox.--> 
          <value>FullAccess</value> 
        </accessRights> 
      </permission> 
    </permissions> 
  </data> 
</response>

Applies To

  • Hosted Messaging and Collaboration version 4.5

  • Hosted Messaging and Collaboration version 4.0

See also

Other Resources

API Name [HMC SDK]
API Name [HMC SDK]
API Name [HMC SDK]
API Name [HMC SDK]