public/get-AllExOPermissions.ps1
|
Function get-AllExOPermissions{ <# Author = "Jos Lieben (jos@lieben.nu)" CompanyName = "Lieben Consultancy" Copyright = "https://www.lieben.nu/liebensraum/commercial-use/" Parameters: -expandGroups: if set, group memberships will be expanded to individual users -includeFolderLevelPermissions: if set, folder level permissions for each mailbox will be retrieved. This can be (very) slow #> Param( [Switch]$expandGroups, [Switch]$includeFolderLevelPermissions ) $activity = "Scanning Exchange Online" if($includeFolderLevelPermissions){ Write-Host "Including folder level permissions, this will lengthen the scan duration significantly" -ForegroundColor Yellow } Write-Progress -Id 1 -PercentComplete 1 -Activity $activity -Status "Scanning roles..." get-ExORoles -expandGroups:$expandGroups.IsPresent Write-Progress -Id 1 -PercentComplete 1 -Activity $activity -Status "Retrieving all recipients..." Write-Host "Getting all recipients..." Write-Progress -Id 1 -PercentComplete 2 -Activity $activity -Status "Retrieving all recipients..." $global:octo.recipients = (New-ExOQuery -cmdlet "Get-Recipient" -cmdParams @{"ResultSize" = "Unlimited"}) | Where-Object{$_ -and !$_.Identity.StartsWith("DiscoverySearchMailbox")} foreach($recipient in $global:octo.recipients){ New-ScanJob -Title $activity -Target $recipient.displayName -FunctionToRun "get-ExOPermissions" -FunctionArguments @{ "recipientIdentity" = $recipient.Identity "expandGroups" = $expandGroups.IsPresent "includeFolderLevelPermissions" = $includeFolderLevelPermissions.IsPresent "isParallel" = $True } } Start-ScanJobs -Title $activity Write-Progress -Id 1 -Completed -Activity $activity } |