Share via

Exchange 2007 Provider::RemoveMailboxPermission

  • Article

This method removes specific permissions for users or groups to the Specified Mailbox.

Arguments

Input Arguments Required Description

<preferredDomainController>

Yes

The domain controller to use for Active Directory actions.

<path>

Yes

The Lightweight directory access protocol (LDAP) path of the user mailbox.

<user>

Yes

This parameter specifies a user whose assigned permissions to this mailbox will be removed.

<accessRights>

Yes

This parameter specifies the rights to remove.

<accessRights/ value >

Yes

This parameter specifies the rights removed from the mailbox. Enum

  • ChangeOwner

  • ChangePermission

  • DeleteItem

  • ExternalAccount

  • FullAccess

  • ReadPermission

<deny>

No

Deny permissions to the mailbox for the specified user.

<inheritanceType>

No

This parameter specifies whether permissions are inherited to folders within the mailbox. Enum

  • None

  • All

  • Descendents

  • SelfAndChildren

  • Children

Remarks

Security

Rollback Method: Not implemented

The caller must be at least a member of role: UserCreators.

Sample Code

Example XML Request

<request> 
  <data> 
    <!--The domain controller to use for Active Directory actions.--> 
    <preferredDomainController>AD01.Fabrikam.Com</preferredDomainController> 
    <!--Specifies the LDAP path of the user mailbox.--> 
    <path>LDAP://CN=kima@alpineskihouse.com,OU=AlpineSkiHouse,OU=ConsolidatedMessenger,OU=Hosting,DC=Fabrikam,DC=Com</path> 
    <!--Specifies a user whose assigned permissions to this mailbox will be removed.--> 
    <user>LDAP://CN=johnc@alpineskihouse.com,OU=AlpineSkiHouse,OU=ConsolidatedMessenger,OU=Hosting,DC=Fabrikam,DC=Com</user> 
    <!--Specifies the rights to remove.--> 
    <accessRights> 
      <!--Specifies the rights removed from the mailbox.--> 
      <value>FullAccess</value> 
    </accessRights> 
    <!--Deny permissions to the mailbox for the specified user.--> 
    <deny>false</deny> 
    <!-- 
              Specifies whether permissions are inherited to folders within the mailbox. 
              All - Indicates inheritance that includes the object to which the ACE is applied, the object's immediate children, and the descendents of the object's children. 
              Descendents - Indicates inheritance that includes the object's immediate children and the descendants of the object's children, but not the object itself. 
              SelfAndChildren - Indicates inheritance that includes the object itself and its immediate children. It does not include the descendents of its children. 
              Children - Indicates inheritance that includes the object's immediate children only, not the object itself or the descendents of its children. 
              None - Indicates no inheritance. The ACE information is only used on the object on which the ACE is set. ACE information is not inherited by any descendents of the object. 
            --> 
    <inheritanceType>All</inheritanceType> 
  </data> 
  <procedure> 
    <execute namespace="Exchange 2007 Provider" procedure="RemoveMailboxPermission" impersonate="1"> 
      <before source="data" sourcePath="preferredDomainController" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="path" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="user" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="accessRights" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="deny" destination="executeData" mode="move" /> 
      <before source="data" sourcePath="inheritanceType" destination="executeData" mode="move" /> 
      <after source="executeData" destination="data" mode="merge" /> 
    </execute> 
  </procedure> 
</request>

Applies To

Exchange 2007 Provider Namespace for:

  • Hosted Messaging and Collaboration version 4.5

  • Hosted Messaging and Collaboration version 4.0

See also

Tasks

Hosted Email 2007::CreateFolder
Hosted Email 2007::DeleteFolder
Hosted Email 2007::MailEnableFolder
Hosted Email 2007::MailDisableFolder
Hosted Email 2007::ModifyFolder
Hosted Email 2007::AddFolderPermission