For exchange online mailboxes, how can you get a report of which users have access to each mailbox, and any retention policies assigned against each?

You can easily check the permissions from the EAC (Recipients -> Mailboxes -> double-click the mailbox -> Mailbox delegation on the left) or via PowerShell:

Get-MailboxPermission user@domain.com| ? {$_.IsInherited -eq $false -and $_.User -ne "NT AUTHORITY\SELF"}

For retention policy, again you can check them via the EAC (Mailbox features tab) or via PowerShell:

Get-Mailbox user@domain.com | select RetentionPolicy

Hi,

Here is my command for reference to query list of all mailboxes with permission assigned on them (filter out SELF and inherited permissions) and export them to .scv file.

Get-Mailbox | Get-MailboxPermission | where {($_.IsInherited -eq $false) -and -not ($_.User -like NT AUTHORITY\SELF)} | Select-Object Identity,User, @{Name='AccessRights';Expression={[string]::join(', ', $_.AccessRights)}},IsInherited | Export-CSV C:\permission.CSV

And here is my command to query list of all mailbox with retention policies assigned to them then export to .scv file.

Get-Mailbox resultsize unlimited | Select-Object Identity,RetentionPolicy | Export-CSV C:\retentionpolicy.CSV

Best Regards.

• Edited by Lynn-Li 3 hours 40 minutes ago