Shared mailbox - check if user have permission from csv file

Question

Hi all,
i know this is a long shot,but i still belive in Santa.Here is our situation.
We grant our users access to Shared mailboxes by joining them to a security group (mail enabled) that starts with RG-XXX.
Then i ran following command to list all users that are not member of a group starting with RG:
$groups = Get-ADGroup -Filter {(name -like "*RG-Full*") -or (name -like "*RG-SEND*") -or (name -like "*RG-OS*")} | Select -ExpandProperty DistinguishedName
foreach ($group in $groups){ $ADUsers = $ADUsers | Where-Object { $_.MemberOf -notcontains $group } }
$FilteredUsers = $ADUsers
$FilteredUsers | Export-Csv C:\temp\file.csv
This worked great and i got a list of people that is not member of these groups.Problem is that some users are granted permission directly to the shared mailbox.This means that some people on the list still have access to a shared mailbox.
Question is,can i use this list (.csv file containing alias) and run another check to see if they have been granted access to any shared mailbox?
Thanks!
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

Answer 1

You need to pipe the last one:
$arrMsolUserData | Export-CSV C:\scripts\output.csv -nti
Also, you might need to adjust the value of $user depending on the format you used in the CSV. If the column in the CSV is named "alias", you might have to use $user.alias instead of just $user in the
Get-MailboxPermission cmdlet.
Here's an updated example:
$usertocheck = Import-CSV C:\scripts\file.csv
#Get all the shared mailboxes
$shared = Get-Mailbox -RecipientTypeDetails SharedMailbox -ResultSize Unlimited
#create the aggregate and cycle all the objects
$arrMsolUserData = @()
foreach ($user in $UserToCheck) {
foreach ($MB in $shared) {
$MBrights = Get-MailboxPermission -Identity $MB.PrimarySmtpAddress -User $user.alias
if (!$MBrights) { continue }
$objUser = New-Object PSObject
$i++;Add-Member -InputObject $objUser -MemberType NoteProperty -Name "Number" -Value $i
Add-Member -InputObject $objUser -MemberType NoteProperty -Name "User" -Value $user.Alias
Add-Member -InputObject $objUser -MemberType NoteProperty -Name "Mailbox" -Value $MB.PrimarySmtpAddress
Add-Member -InputObject $objUser -MemberType NoteProperty -Name "Access Rights" -Value $MBrights.AccessRights
$arrMsolUserData += $objUser }
$arrMsolUserData | Export-CSV C:\scripts\output.csv -nti