Created by Claude - please verify

Folder permissions - on-demand scan of 5 folders per mailbox (root, Inbox, Sent Items, Deleted Items, Contacts). Slow on large tenants.

Required Microsoft Graph permissions

Exchange.ManageAsApp (+ View-Only Recipients) — application permission, granted to the app registration with admin consent.

Licence: None.

Endpoints: Get-EXOMailbox -RecipientTypeDetails UserMailbox, SharedMailbox · Get-EXOMailboxFolderPermission (root, Inbox, Sent Items, Deleted Items, Contacts)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Mailbox Folder Permissions (non-calendar)

Users can share their Inbox with a colleague - or with Default, which means everyone in the company. Attackers who compromise one account use such grants to read other mailboxes without any admin role. CalendarPermissions covers calendars; this scan covers the mailbox root and the Inbox, Sent Items, Deleted Items and Contacts folders. Sub-folders are not scanned.

Press Run scan to check 5 folders in every mailbox (can take an hour or more on large tenants).