Quick value
Free · No registration · No catch
Full Mailbox + Send-As + Send-on-Behalf + Folder-level reports
Attribution required · No resale · No derivatives
Included files
Fulfillment blocked — Download URL still points at an unrelated Webflow template. Replace with the real script ZIP/CDN URL before turning Download Ready on. Intended package (not yet verified via live download): audit script bundle — PowerShell — mailbox permission audit sample output — HTML/CSV — report examples LICENSE.txt — text — license NOTICE.md — markdown — notices DISCLAIMER.txt — text — disclaimer README.md — markdown — setup and usage
How to use
Install the ExchangeOnlineManagement (EXO V3) module and connect with modern auth (delegated MFA or app-only certificate).
Run the audit script against your Exchange Online tenant for FullAccess, SendAs, SendOnBehalf, and folder-level delegates.
Open the HTML and CSV reports, review risk flags (stale delegates, broad group or guest access), and follow the next steps.
Overview
Audit who can access or impersonate any mailbox in Exchange Online—FullAccess, SendAs, SendOnBehalf, and folder-level delegates—then export an auditor-friendly HTML and CSV report with risk flags and next steps.
- Platform: Microsoft 365 — Exchange Online
- What it audits: FullAccess, SendAs, SendOnBehalf, Calendar/Inbox/Sent Items delegates
- Risk flags: Stale delegates, disabled principals, broad group access, external/guest access
- Outputs: CSV + auditor-friendly HTML (optional JSON) with timestamps
- Run time (guide): ~2–6 minutes per 1,000 mailboxes (scope-dependent)
- Auth modes: Delegated (MFA) or App-only (certificate)
- Requirements: PowerShell 7+ (or Windows PowerShell 5.1), ExchangeOnlineManagement module
- Logging & reliability: Structured log, throttling backoff, resumable pass, exit codes
Who it’s for
Microsoft 365/Exchange Online admins, security/compliance teams, MSPs.
How it connects
Uses the Exchange Online PowerShell V3 (EXO V3) module with REST-backed cmdlets and modern auth
What it doesn’t do
- Doesn’t modify permissions.
- Doesn’t read message content.
- Doesn’t rely on legacy Basic auth (REST-backed cmdlets only). Microsoft Learnpowershellgallery.com
Fit and requirements
About the creator
Kumar Bipul is an enterprise IT solutions architect focused on Microsoft platforms and AI automation (Microsoft 365, Azure, Power Platform). He publishes practical tools and playbooks on kumarbipul.com.
Changelog
September 2026 — Content reviewed. Download fulfillment still pending a real file URL (Coming soon).
2025 — Product page launched for Exchange Online mailbox permission audits.
Limits and stack
PowerShell 7+ or Windows PowerShell 5.1; ExchangeOnlineManagement (EXO V3) module.
Microsoft 365 Exchange Online access via delegated MFA or app-only certificate.
Does not modify permissions. Does not read message content. Does not rely on legacy Basic auth (REST-backed cmdlets only).
FAQ & Notes
Download contains the audit script bundle, sample output, LICENSE.txt, NOTICE.md, DISCLAIMER.txt, and README.md. Requires Exchange Online PowerShell V3 module.
Disclaimer
Provided AS IS with no warranties and no support obligations. The author is not liable for any damages. Full disclaimer in DISCLAIMER.txt inside the download.
Get the playbook
Free
Free · PowerShell utility · Exchange Online audits
Get the PDF
Download the free PDF playbook. No signup required.
