Automatiser permissions calendrier Exchange Online PowerShell

1Mailbox-UserPrincipalName
2└── Calendar (ou localisé : Calendrier/Kalender)
3    ├── Default (Anonymous)
4    ├── Reviewer (ReadItems)
5    ├── Editor (ReadItems + CreateItems + EditOwnedItems)
6    ├── Owner (FullAccess)
7    └── Delegate (SendOnBehalfOf + Meeting Management)

1# Configuration des variables
2$CalendarOwner = "directeur@contoso.com"
3$DelegateUser = "assistante@contoso.com"
4$NotifyUser = $true
5 
6# Attribution des permissions Delegate
7try {
8    Add-MailboxFolderPermission `
9        -Identity "$CalendarOwner:\Calendar" `
10        -User $DelegateUser `
11        -AccessRights Editor `
12        -SharingPermissionFlags Delegate `
13        -SendNotificationToUser $NotifyUser
14    
15    Write-Host "✓ Permissions accordées avec succès" -ForegroundColor Green
16} catch {
17    Write-Error "Erreur lors de l'attribution : $_"
18}

1# Import du fichier CSV (Owner,Delegate,AccessLevel)
2$DelegationList = Import-Csv -Path "C:\Delegations.csv"
3 
4foreach ($Item in $DelegationList) {
5    try {
6        # Vérification existence des utilisateurs
7        $OwnerExists = Get-Mailbox -Identity $Item.Owner -ErrorAction SilentlyContinue
8        $DelegateExists = Get-Mailbox -Identity $Item.Delegate -ErrorAction SilentlyContinue
9        
10        if ($OwnerExists -and $DelegateExists) {
11            Add-MailboxFolderPermission `
12                -Identity "$($Item.Owner):\Calendar" `
13                -User $Item.Delegate `
14                -AccessRights $Item.AccessLevel `
15                -ErrorAction Stop
16                
17            Write-Host "✓ $($Item.Owner) → $($Item.Delegate)" -ForegroundColor Green
18        }
19    } catch {
20        Write-Warning "Échec pour $($Item.Owner): $_"
21    }
22}

1function Get-CalendarPermissionsReport {
2    param(
3        [Parameter(Mandatory=$true)]
4        [string]$UserPrincipalName
5    )
6    
7    try {
8        $Permissions = Get-MailboxFolderPermission -Identity "$UserPrincipalName:\Calendar"
9        
10        $Report = $Permissions | Where-Object { $_.User -ne "Default" -and $_.User -ne "Anonymous" } |
11                 Select-Object @{
12                     Name = "CalendarOwner"
13                     Expression = { $UserPrincipalName }
14                 },
15                 @{
16                     Name = "DelegateUser" 
17                     Expression = { $_.User }
18                 },
19                 AccessRights,
20                 SharingPermissionFlags
21                 
22        return $Report
23    } catch {
24        Write-Error "Impossible d'accéder au calendrier de $UserPrincipalName : $_"
25    }
26}
27 
28# Utilisation
29$Report = Get-CalendarPermissionsReport -UserPrincipalName "directeur@contoso.com"
30$Report | Format-Table -AutoSize

1# Modification d'un accès Reviewer vers Editor
2Set-MailboxFolderPermission `
3    -Identity "directeur@contoso.com:\Calendar" `
4    -User "assistante@contoso.com" `
5    -AccessRights Editor

1# Suppression totale des permissions
2Remove-MailboxFolderPermission `
3    -Identity "directeur@contoso.com:\Calendar" `
4    -User "ancien-assistant@contoso.com" `
5    -Confirm:$false

1function Get-LocalizedCalendarFolder {
2    param([string]$UserPrincipalName)
3    
4    $PossibleNames = @("Calendar", "Calendrier", "Kalender", "Calendario")
5    
6    foreach ($Name in $PossibleNames) {
7        try {
8            $TestPath = "$UserPrincipalName:\$Name"
9            Get-MailboxFolderPermission -Identity $TestPath -ErrorAction Stop | Out-Null
10            return $Name
11        } catch {
12            continue
13        }
14    }
15    
16    throw "Impossible de localiser le dossier calendrier pour $UserPrincipalName"
17}
18 
19# Utilisation avec détection automatique
20$CalendarFolder = Get-LocalizedCalendarFolder -UserPrincipalName "user@contoso.com"
21Add-MailboxFolderPermission -Identity "user@contoso.com:\$CalendarFolder" -User "delegate@contoso.com" -AccessRights Editor

1function Set-TemporaryCalendarAccess {
2    param(
3        [string]$Owner,
4        [string]$Delegate,
5        [datetime]$ExpirationDate
6    )
7    
8    # Attribution initiale
9    Add-MailboxFolderPermission -Identity "$Owner:\Calendar" -User $Delegate -AccessRights Editor
10    
11    # Planification de révocation via tâche programmée
12    $TaskAction = New-ScheduledTaskAction -Execute 'PowerShell.exe' -Argument "-Command Remove-MailboxFolderPermission -Identity '$Owner:\Calendar' -User '$Delegate' -Confirm:$false"
13    $TaskTrigger = New-ScheduledTaskTrigger -Once -At $ExpirationDate
14    
15    Register-ScheduledTask -TaskName "RevokeDelegation_$($Owner)_$($Delegate)" -Action $TaskAction -Trigger $TaskTrigger
16}

1# Attribution basée sur l'organigramme Active Directory
2$Manager = Get-AzureADUser -ObjectId "directeur@contoso.com"
3$DirectReports = Get-AzureADUserDirectReport -ObjectId $Manager.ObjectId
4 
5foreach ($Report in $DirectReports) {
6    Add-MailboxFolderPermission `
7        -Identity "$($Manager.UserPrincipalName):\Calendar" `
8        -User $Report.UserPrincipalName `
9        -AccessRights Reviewer
10}