KB ID 0001466

Problem

Obviously there are some security concerns about having a user with full mailbox access to all mailboxes! But that aside, I was using a third party Migration tool last week, and it needed to connect to every mailbox with full access rights to perform the migration.

So this is how I did it;

Solution

Firstly you need to connect to your Office 365 tenant with PowerShell;

Connect to Office 365 Exchange PowerShell

Now I could grant access to one user, but I’m going to create a ‘Group’, Exclude that group from the Global Address List, Put my user in that group. Then Finally grant the ‘group’ rights to all the mailboxes.

[box]

New-DistributionGroup -Name “365-Migration-Admins” -Type "Security"

Set-DistributionGroup "365-Migration-Admins" -HiddenFromAddressListsEnabled $True

Add-DistributionGroupMember -Identity "365-Migration-Admins" -Member "Pete@tenant.onmicrosoft.com"

Get-Mailbox -ResultSize unlimited -Filter {(RecipientTypeDetails -eq 'UserMailbox')} | Add-MailboxPermission -User 365-Migration-Admins@tenant.onmicrosoft.com -AccessRights FullAccess -InheritanceType all

[/box]

Related Articles, References, Credits, or External Links

NA