Home

Assign permissions to resources in a hybrid environment

%3CLINGO-SUB%20id%3D%22lingo-sub-147807%22%20slang%3D%22en-US%22%3EAssign%20permissions%20to%20resources%20in%20a%20hybrid%20environment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-147807%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20started%20moving%20users%20to%20Office%20365%20and%20run%20in%20to%20a%20problem.%20We%20moved%20the%20user%2C%20but%20not%20the%20meetingrooms%20and%20resources.%3C%2FP%3E%0A%3CP%3EWhen%20User%20A%20is%20moved%2C%20User%20A's%20permissions%20on%20Resource%201%20is%20removed%3F%3C%2FP%3E%0A%3CP%3ETrying%20to%20add%20User%20A%20to%20Resource%201's%20calendar%20(add-mailboxfolderpermission)%20do%20not%20work.%20Powershell%20says%3A%20%3CEM%3EThe%20user%20%22USERNAME%22%20was%20found%20in%20Active%20Directory%20but%20isn't%20valid%20to%20use%20for%20permissions.%20Try%20an%20SMTP%20address%20instead.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3EUsing%20SMTP%20address%20do%20not%20help.%3C%2FP%3E%0A%3CP%3ETo%20me%20it%20looks%20like%20its%20not%20possible%20to%20use%20an%20Office%20365%20user%20object%20(remote-mailbox%20object)%20to%20assign%20permissions%3F%3C%2FP%3E%0A%3CP%3EEasy%20solution%20is%20to%20move%20the%20resource%20with%20the%20user%2C%20but%20I%20will%20run%20into%20senarios%20where%20the%20this%20is%20not%20a%20good%20solution.%3C%2FP%3E%0A%3CP%3EAny%20surgestions%2C%20expriences%20or%20other%20comments.....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-147807%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-147952%22%20slang%3D%22en-US%22%3ERe%3A%20Assign%20permissions%20to%20resources%20in%20a%20hybrid%20environment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-147952%22%20slang%3D%22en-US%22%3E%3CP%3ECross-premises%20folder%2C%20delegate%2C%20send%20as%20and%20send%20on%20behalf%20of%20permissions%20are%20NOT%20supported.%20Only%20Full%20Access%20permissions%20will%20work%2C%20and%20only%20in%20some%20cases.%20Read%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fjj200581(v%3Dexchg.150).aspx%23considerations%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fjj200581(v%3Dexchg.150).aspx%23considerations%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Jesper Stein
Contributor

We started moving users to Office 365 and run in to a problem. We moved the user, but not the meetingrooms and resources.

When User A is moved, User A's permissions on Resource 1 is removed?

Trying to add User A to Resource 1's calendar (add-mailboxfolderpermission) do not work. Powershell says: The user "USERNAME" was found in Active Directory but isn't valid to use for permissions. Try an SMTP address instead.

Using SMTP address do not help.

To me it looks like its not possible to use an Office 365 user object (remote-mailbox object) to assign permissions?

Easy solution is to move the resource with the user, but I will run into senarios where the this is not a good solution.

Any surgestions, expriences or other comments.....

1 Reply
Highlighted

Cross-premises folder, delegate, send as and send on behalf of permissions are NOT supported. Only Full Access permissions will work, and only in some cases. Read here: https://technet.microsoft.com/en-us/library/jj200581(v=exchg.150).aspx#considerations