Rule description
This rule queries Office 365 mailboxes that satisfy specific criteria and grants permissions over these mailboxes to the specified users or security groups.
When to use this rule
Use this rule when you need to grant permissions over Office 365 mailboxes to some users or security groups.
Rule Settings
Query Section
| Setting name | Description |
|---|---|
|
Query criteria |
Query criteria are sent to the target platform with other query parameters to reduce the number of returned objects and may improve query performance. Tip: For different samples on the criteria builder, see KB20180410-1.
|
|
Filter |
To hide unwanted data based on criteria, not supported by the target system in the query criteria, set the filtering conditions here. Example: Filter by the found object Distinguished Name. Tip: For optimal performance, use Query criteria above to filter objects whenever possible.
|
|
More options |
|
|
Properties to Display |
To display additional Office 365 properties for each object found by the query, add those properties to the list. |
|
Sort by |
Sort result objects list. |
|
Maximum Returned Results
|
The maximum number of mailboxes returned from Office 365. The default value is taken from Maximum returned results setting on HOME > CONFIGURATION > Microsoft Office 365 settings. |
|
Initialization script |
Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule. Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where the initialization script can help. You can initialize a global variable in this setting and then use it in query criteria. Important: To use a variable, declared in the initialization script, in the query scope, it must be global: $global:<variable name>.
|
Action Section
| Setting name | Description |
|---|---|
|
User getting permission |
Specify the user that you're assigning the permission to. The user that you specify for this parameter must be a user or security group. You can use any value that uniquely identifies the user. For example:
You can use several values separated by semi-colons. |
|
Permission |
Specify permission that you want to grant:
|
|
Enable auto-mapping |
Specify whether to enable or disable the auto-mapping feature in Microsoft Outlook that uses Autodiscover to automatically open other mailboxes for the user. |
Output Section
This section defines the output format of this rule.
To get more information about this section, please see the Output section article.
Enforce/Schedule section
This section defines the schedule for how often to run the rule.
To get more information about this section, please see the Enforce/Schedule section article.
Change History
| Version | Notes |
|---|---|
| 7.1.0 | The set of permissions is extended. The new Enable auto-mapping setting is added. |
| 6.0.0 | The rule is introduced in the product. |
Comments
0 comments
Please sign in to leave a comment.