Outlook delegate access
Apart from the control an administrator can exercise over
mailbox access, Outlook users can also control access by using the
Delegate Access option, found in the backstage area for Outlook 2013.
When
you give delegate access to another user with Outlook, you
automatically allow her to have Send On Behalf Of access, so she can
send messages on your behalf. You also have the opportunity to delegate
folder-level permissions over the Inbox, Calendar, Tasks, Contacts, and
Notes folders, the logic being that these are the most commonly used
folders to share information between a user and his administrative
assistant or someone else who might need access to the mailbox. Access
to other folders cannot be given through Outlook. If you need a
delegate to access a different folder, you have to grant Full Access
over the mailbox to that delegate or run the
Set-MailboxFolderPermission command in EMS.
In Figure 6,
you see that three users have delegate access to the mailbox. As stated
previously, the act of adding each user as a delegate automatically
grants her Send On Behalf Of permission. Each of the three users can
have a different degree of access to the folders, represented by
separate folder-level permissions. You can see these permissions by
running the Get-MailboxFolderPermission command. For example, to see
the access granted to the Calendar folder for my mailbox, I could run:
Get-MailboxFolderPermission –Identity Tredmond:\Calendar | Format-Table FolderName, User, AccessRights
FolderName User AccessRights
---------- ---- ------------
Calendar Default {AvailabilityOnly}
Calendar Andersen, Henriette-Thaulow {Editor}
Calendar Akers, Kim {Editor}
Calendar Amitai, Zwie {AvailabilityOnly}
The
default entry tells you that other users can access the calendar to
fetch availability information when they want to see whether I am
available for a meeting. The next two entries tell you that these two
users have editor control over the calendar, meaning that they can
create, edit, and modify entries. The last tells you that another user
is a delegate but has no access to the calendar. This person can send
email on my behalf but might not have been given access to any other
folder.
