Delegation removal

Question

We have a workflow that keeps the employees mailbox active for 2 weeks after the user is deprovisioned and assigns the manager with full access. We need a additional workflow that will remove ALL delegation on the account after the two weeks is up. Please advise.

Comments

Hello,

Could you, please, specify how exactly the current workflow is configured? Screenshots would be very helpful. You can post them here or send to our support email (support[at]adaxes.com).
Do we understand correctly, that 2 weeks after deprovisioning, all the trustees should be removed from the Mailbox Rights section including the user manager?

---

@ Support - You are correct we would like all trustees removed (Send As, Send on Behalf and Full Access) after the two weeks is complete.

Below is the current process in screenshot and code pasted in.

$mbGUIDProperty = "adm-CustomAttributeBinary5" # TODO: modify me
$mbStorePathProperty = "adm-CustomAttributeText5" # TODO: modify me

# Get mailbox GUID and mailbox store DN
$exchangeGuid = $Context.TargetObject.Get("msExchMailboxGuid")
$mailboxStoreDN = $Context.TargetObject.Get("homeMDB")

# Save the GUID and the DN to Custom Attributes
$Context.TargetObject.Put($mbGUIDProperty, $exchangeGuid)
$Context.TargetObject.Put($mbStorePathProperty, $mailboxStoreDN)
$Context.TargetObject.SetInfo()

# Disconnect the mailbox
$Context.TargetObject.DeleteMailbox()

---

Hello,

Thank you for the clarification, but Send As, Send on Behalf Of and Full Access are permissions. Each of these permissions can be delegated to a trustee (e.g. to the user’s manager). Unfortunately, there is no possibility to remove all the trustees listed in the Mailbox Rights list. Could you clarify whether you need to remove all the trustees that can actually be removed or only the trustees that are added during deprovisioning? If latter is the case, could you clarify what they are? A screenshot of the configuration object (e.g Custom Command) used for deprovisioning will be very helpful.

---

When we deprovision an end user in the environment, we add the manager to full access delegation for the two weeks period of time. We need to remove action once the two weeks is up and we 'archive' the mailbox. We looking to clear the 'full access' delegation.

We use this in another section:

Modify mailbox settings for the User: clear Send on Behalf Of, clear Send As

Answer 1

Hello,

Thank you for the clarification. As during the deprovision the Full Access permission over the mailbox is granted to the Manager only, you can update the Modify mailbox settings for the User action in your “another section” to also remove the Manager trustee from the Mailbox Rights list. The action should look like the following:

Comments

@Support

Thank you that works as we need for removing the manager. For a future request having an ability to remove all users from the Full Access would be beneficial as well.