What it works with
Module: ExchangeOnlineManagement
ExchangeOnlineManagement lets PowerShell connect to and work with Exchange Online.
Context: Exchange Online PowerShell
Compatibility: PowerShell 7 is the supported target for this cloud template.
POWERSHELL / EXCHANGEONLINEMANAGEMENT
ProAdvancedRead-onlylow
Export mailbox permissions
Exports delegated mailbox permissions.
Pro generation after license validation · Review before running · Opselith does not connect to your tenant
What this PowerShell script does
Exports delegated mailbox permissions.
Requirements
- CSV output path - Example: C:\Temp\report.csv
Environment
- Module: ExchangeOnlineManagement
- Permissions: Mailbox permission read access
- Output: CSV report
- Context: Exchange Online PowerShell
- Risk: Low
Review before you run The full Pro script is generated by Opselith after license validation. Test outside production first.
NEXT STEP
Ready to generate
Configure Export mailbox permissions in the Builder, review the generated PowerShell and run it yourself in your own PowerShell session.
More about this script
Why use this template?
Use this Pro PowerShell script when you need to export delegated mailbox permissions. It can be previewed in the Builder; Pro access is required to generate it for your own environment.
The template uses ExchangeOnlineManagement and requires Mailbox permission read access. Output: CSV report. Level: Advanced. Action: Read-only. Risk: Low.
Review before running
The script remains preview-only until Pro access is enabled. Review it before running it, and test it outside production first. “Read-only” describes the script itself; anything you add around it can still change data.
Useful next checks
Use Export shared mailboxes to confirm the mailbox scope, then review configured forwarding separately when you need a broader access check.
Preview the script
- Open the template in the PowerShell Builder.
- Review the purpose, requirements, permissions, output and risk.
- Activate Pro when you are ready to generate the full script, then test it outside production.
Pro templates remain previewable before purchase or activation. No tenant connection is required. When you generate a Pro script, only the configuration values needed for that template are sent to Opselith after license validation.Preview Export mailbox permissions →
Before you runModule, permissions, inputs, compatibility and script checks
OPS / SCRIPT DETAILS
Script details
Exports delegated mailbox permissions. Review these details before generating or running the script.
Generated here. Run by you.Opselith does not connect to your tenant or run PowerShell. After generating, review the script and run it in your own PowerShell session.
Permissions and changes
Permissions: Mailbox permission read access
Risk: Low
Read-only: designed to collect information without intentionally changing the target environment.
Changes: Read-only. The script reads data and does not intentionally change the target environment.
Inputs
- CSV output path - Example: C:\Temp\report.csv
What to expect
Output: CSV report
Expect a CSV file at the path you choose. Open it in Excel or another CSV viewer and review the rows.
Example: C:\Temp\report.csvThis template is in the Pro library. Generating the full script requires eligible Pro or tester access. Opselith receives only the values needed to build the script; it does not connect to your tenant, run PowerShell or store the generated script. You review and run the result in your own PowerShell session.
Example use
Exports delegated mailbox permissions.
Enter the required values in the Builder, review the generated script and confirm the output before running it.
Before you run: Make sure your account has Mailbox permission read access. Check that the ExchangeOnlineManagement PowerShell module is available and that you are using the supported PowerShell version. Review the generated script and output path, then test outside production first.
Script checksWhat has been verifiedQA reviewed
Static checksPassed
PSScriptAnalyzerPending
Real-world run testNot yet recorded
Last checkedNot yet recorded
Real-world run results are shown only after Opselith reviews and accepts a tester report.
Tester: report a result →TEST STATUSWhat Opselith has checked
Last reviewed: 10 Sept 2026
PSScriptAnalyzer: Awaiting a release PSScriptAnalyzer gate that includes this script. No analyzer pass is claimed yet.
Pending or Not yet recorded means there is no accepted result on file yet. A passed analyzer check does not mean the script has been run in a real tenant.
PRACTICAL GUIDE
How to use this result
Use this report to inventory explicit delegated mailbox permissions across Exchange Online and identify where access deserves review.
When this helps
- Prepare a mailbox-delegation access review.
- Find mailboxes with multiple explicit delegates.
- Capture permission state before or after a migration or access-cleanup project.
How to read the result
- Each successful row identifies the mailbox, delegate, AccessRights and whether the returned permission is inherited; the script filters inherited entries from the normal result set.
- Status=ERROR rows mean that one mailbox could not be fully read; do not treat the overall CSV as complete until those errors are reviewed.
Things to check
- This report covers the mailbox-permission cmdlet path used by the template; other delegation types can require separate reports.
- Built-in or service-related permission entries can appear differently from normal user delegation, so review identity context before cleanup.
Was this useful?One click. No email.