Shulou(Shulou.com)06/02 Report--

To achieve the ultimate goal:

1. All users can view the detailed schedule of the conference room account in Outlook.

2. Add an agent for the conference room account. You can only operate the calendar of the conference room account, but cannot access other folders.

First of all, link to Exchange Online through Powershell

Then use Get-MailboxFolderPermission-Identity user:\ "Calendar" to get the current calendar permission status. You can see that my calendar is shared, and my colleagues can view my calendar information.

But for the conference room resource account, the above command doesn't work well. I have to change the calendar to calendar before it can be executed. It's a big pit. I've been messing around for half an hour.

It can be seen from the above that the default permission for all users in this conference room is AvailabilityOnly, which means only to view the availability data and only see which time of day has been scheduled to be occupied in this conference room.

Our primary goal is to make the schedule of the conference room visible to every user, so I use the following command to configure a schedule where all users can access a conference room.

Set-MailboxFolderPermission-Identity meetingroomname:\ "calendar"-User default-Acce***ights limiteddetails

If you want this conference room mailbox to be authorized for a group, you can refer to the following command:

Set-MailboxFolderPermission-Identity meetingroomname:\ "Calendar"-User "groupname"-Acce***ights Editor

Among them: the permissions of Acce***ights can also be adjusted accordingly

After setting the above permissions, you should also remember to configure the schedule of the conference room, such as not deleting the topic, not deleting the body of the meeting attachment, etc., the command is as follows

Set-CalendarProcessing-Identity meetingroomname-AddOrganizerToSubject $true-DeleteComments $false-DeleteSubject $false

More information can be found on the Microsoft website.

Https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-calendarprocessing?view=exchange-ps

Then I use another ordinary account to book this conference room.

Then add a conference room mailbox from my outlook calendar

Search for conference rooms that have just been set up for all users to view

After you add it, you can see the schedule information of the conference room, but you can only see the title, not the details.

Try to delete this calendar event after updating

Because there is no authorization for my account for this conference room, this calendar event cannot be deleted directly.

Next, we will authorize the agent for this conference room account.

Add-MailboxFolderPermission-Identity meetingroomname@ucssi.com:\ Calendar-User user@ucssi.com-Acce***ights Editor-SharingPermissionFlags Delegate

You can only edit the calendar and cannot access private folders.

For specific commands, please refer to the Microsoft website.

Https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/add-mailboxfolderpermission?view=exchange-ps

Confirm that permissions are in place

The Acce***ights attribute of my account is Editor for editing permissions, and all users are LimitedDetails permissions by default, which means you can view the topic and location. The Editor contains permission to view the Microsoft website above.

At this time, I use another account to book this conference room to create calendar events, and the users of the appointment can see the details of the entire calendar.

At this point, after my Outlook refresh, I also see the details of this event, including who created the event and what the subject content is.

Then the attempt to delete the calendar event is also successful. Of course, you can also manually modify the schedule time that others have already booked or delete it directly.

Finally, check the permissions of other folders in this conference room, and you can see that all the other folders, including the inbox, do not have access to my account, and no one else has access to Acce***ights. The original goal was achieved.

If you only want read and write permissions, use NonEditingAuthor after the Acce***ights parameter of the Set-MailboxFolderPermission command. If you add a new proxy account, you should use the Add command instead of the Set command.

You can see that by default all users can view the schedule information of the conference room, but my account still has read and write permissions.

Then I will test to delete the schedule that other people have booked, and I can see that it is impossible to delete the schedule that other people have already booked.

Now that there are reads and writes and the reads have been verified, verify the write calendar events

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.