Can't add Calendar Permissions via Powershell

[Guido Neubecker]

Hello everyone,

we use Exchange Online and I wan't to add calendar Permissions via Powershell command "Add-MailboxFolderPermissions -Identity "<>:\Calendar" -User <> -AccessRights Reviewer" but I allways get the error message "Write-ErrorMessage : |Microsoft.Exchange.Configuration.Tasks.ThrowTerminatingErrorException|Insufficient permissions.
Please raise an elevated access request for this task. "

The command worked in the past. The command is still working against our test-tenant. I use a PS window in Admin-mode and my account is currently member of the "organisation admins"-Role of EXO. I also tried the "Global Admin" and "Exchange Admin"-Role. 

Any Ideas?

Best regards

Guido

[#2 · Accepted solution]

Looks like someone has configured a PAM policy that prevents the execution of said cmdlet. If you have sufficient permissions, you can review the list of policies via Get-ElevatedAccessApprovalPolicy.

Read more about PAM here: https://practical365.com/privileged-access-management-policies-part-two/

[#3]

That's it!
We had a PAM policy for "Add-MailboxFolderPermissions" so noone could ran that command also no Exchange or global Admin.

Thanks for help!