Forum Discussion

peely's avatar
peely
Copper Contributor
Jan 23, 2025

Teams rooms resource account permissions

I hope someone can help. I am probably doing something very stupid but I cannot get this working.

Exchange 2016 hybrid O365

I want a group people to be able to approve meeting request to the room mailbox but they want the approval emails to go to a common mailbox rather than thier own.

I read that shared mailboxes cannot set up to view private items on resource accounts but user mailboxes can.


Teams room resource account - room@lab.local
User mailbox that my users will have full permissions to (will convert to a shared mailbox once woking) access@lab.local
This mailbox is a delegate of the room account to accept meeting requests. I have also configure view private items for this using
Set(or add)-MailboxFolderPermissions -Identity room@lab.local:\Calendar -User access@lab.local -AccessRights Editor -SharingPermissionFlags Delegate,CanviewPrivateItems

Delegate user1@lab.local has full rights to the access@lab.local mailbox

In my head this should allow the approval emails to go to the access mailbox and the user1 will be able to approve.

They should also be able to view the room calendar and see private items in it but it is just not working.

1 Reply

  • Andres-Bohren's avatar
    Andres-Bohren
    Steel Contributor

    Hi peely 

    Seems like you want do do something like this:

    $Room = "room@lab.local"
    $Shared = "access@lab.local"
    Set-CalendarProcessing -Identity $Room  -ResourceDelegates $Shared -AllBookInPolicy $false -AllRequestInPolicy $true -BookInPolicy @() -ForwardRequestsToDelegates $true -AutomateProcessing AutoAccept
    Set-Mailbox -Identity $Room -GrantSendOnBehalfTo $Shared


    The Meeting request is forwarded to access@lab.local so you need to add the Permission there

    Set(or add)-MailboxFolderPermissions -Identity access@lab.local:\Calendar -User user1@lab.local -AccessRights Editor -SharingPermissionFlags Delegate,CanviewPrivateItems


    >Delegate user1@lab.local has full rights to the access@lab.local mailbox
    And might also needs the SendAs Permission

    Kind Regards
    Andres

Resources