ExCal-ARights is a script to automate the change of permissions on Microsoft Exchange Server calendars. This script allows you to define your own configuration (see [Use->Configuration](#configuration)). Moreover, any action performed by ExCal-ARights is recorded so that you can confirm and view the changes after application.
You can also choose to quit the script before starting the change of permissions. As well as previewing the permissions of all calendars before and after the change. The permissions preview does not consider the configuration filters, it previews all users.
To install Windows 11 see the requirement at https://www.microsoft.com/en-us/windows/windows-11-specifications (check minimum version above). To install powershell 7 use the command below in your Pshell (check minimum version above).
Clone or download and extract this repository from its archive. Open the `configs.ps1` script and configure it. Then run the `run-script.ps1` file and follow the indications.
After the process you should find a log file with the process details.
### Exchange Server Structure
Regardons ici à quoi resemble la structure d'un server Exchange au niveau de la répartition des dossiers et permissions d'accès par utilisateur.
1. Is the first level and represents a user. ```[*1]```
2. Is the second level and represents a folder in our case a calendar. This level can contain several items (folders). ```[*2]```
3. Is the third level and represents the authorizations assigned to a specific user to the folder by the 1st level owner user. ```[*3]```
* "**Default**" user represents the authorizations for all persons for which the authorizations have not been defined manually.
* "**Anonymous**" user should have *None* permission (authorizations for anyone outside the organization).
```
Exchange_Server:
├───User-1 [*1]
│ └───Calandar [*2]
│ ├───Default [*3]
│ └───Anonymous
├───User-2
│ └───Agenda
│ ├───Default
│ ├───Anonymous
│ └───User-3
└───User-3
├───Agenda-2
│ ├───Default
│ ├───Anonymous
│ └───User-1
└───Calandar
├───Default
├───Anonymous
├───User-1
├───User-2
└───User-3
```
### Configuration
#### New permission
This variable allows you to configure the permission that will replace the current permission (if the current permission fires the trigger). You can find [here](https://docs.microsoft.com/en-us/powershell/module/exchange/set-mailboxfolderpermission?view=exchange-ps#parameters) the list of permissions on the Microsoft website.
```ps1
$Permission = "Reviewer"
```
#### Trigger permission
This variable is used to define the list of permissions that should be changed. We call this list of permissions the list of triggers.
This variable defines the list of caller names to be processed. If a user has more than one calendar in this list, all calendars in the list will be impacted.
This variable defines a list of email aliases of users whose calendars should be ignored (in short, the calendars of these people will not be checked or processed). An alias is that part of the email address (``contact``@endmove.eu).
