Office 365 mailbox and folder permissions (with powershell)

The number of e-mail folder and mailbox permissions possible with Office 365 can be very confusing...  Below are some powershell tips on how to display the permissions followed by some tips on how to add permissions.

Viewing permissions

Using a Powershell linked session (see this post for more info) you can retrieve the permissions set at one of the following three possible hierarchical levels:

a)  Mailbox level
  b) Mailbox Top of Information Store level
    c) A Mailbox Folder level

The above hierarchical levels are hereditary by default, however can be overridden by a specific permission set at a lower level or by using a variant of the switch -InheritanceType (None | All | Descendents | SelfAndChildren | Children )

For level (a - Mailbox) use the PS > get-mailbox | get-mailboxpermission

(add | fl at the end of the command to get a formatted output)

To filter for a particular user  

PS > get-mailboxPermission -Identity username@company.com | fl

For level (b - Mailbox Top Level) use the PS > get-mailbox | get-mailboxFolderPermission

To filter for a particular user  

PS > get-mailboxFolderPermission -Identity username@company.com | fl

For level (c - Mailbox Folder Level) add :<\foldername> to the end of the indentity

PS > get-mailboxFolderPermission -Identity username@company.com:\inbox | fl

Setting permissions - in powershell

a) Adding a Top folder level permission on a mailbox name@company.com for a user "mysec"

PS > Add-MailboxPermission "name@company.com" -User "mysec" -AccessRights ReadPermission

b) Adding a Top folder level permission on a mailbox name@company.com for a user "mysec"

PS > Add-MailboxfolderPermission "name@company.com" -User "mysec" -AccessRights Reviewer

c) Adding a folder level permission on a mailbox name@company.com for a user "mysec"

PS > Add-MailboxfolderPermission "name@company.com:\inbox" -User "mysec" -AccessRights PublishingEditor

Setting permissions - in Outlook

You can set permission for a users mailbox Top Level Folder (b) or Specific Level Folder (c) from a connected Outlook client.

(b) right click on the account name and choose Folder Permissions 

(c) right click on the folder name and choose Properties.  Then click on Permissions and set them there.