raytechnote.com

Error message: 

The operation on mailbox “John” failed because it’s out of the current user’s write scope. The action
‘Set-Mailbox’, ‘HiddenFromAddressListsEnabled’, can’t be performed on the object ‘John’ because the object
is being synchronized from your on-premises organization. This action should be performed on the object in your
on-premises organization.

How to fix it:

1. Open Active Directory Users & Computers.
2. Enable Advanced Features by clicking View > Advanced Features.
3. Set the msExchHideFromAddressLists attribute to True

4. set the mailNickname field.

Check the current calendar permissions:

Get-MailboxFolderPermission -Identity user1@domain.com:\calendar

In order to grant user2 the permission to view and edit user1 calendar items, run the following command:

Add-MailboxFolderPermission -Identity user1@domain.com:\calendar -user user2@domain.com -AccessRights Editor

When managing calendar and Outlook folder permissions, you can use the following predefined permissions level roles:

• Owner — gives full control of the mailbox folder: read, create, modify, and delete all items and folders. Also, this role allows to manage item’s permissions;
• PublishingEditor — read, create, modify, and delete items/subfolders (all permissions, except the right to change permissions);
• Editor — read, create, modify, and delete items (can’t create subfolders);
• PublishingAuthor — create, and read all items/subfolders. You can modify and delete only items you create;
• Author — create and read items. Edit and delete own items;
• NonEditingAuthor — full read access, and create items. You can delete only your own items;
• Reviewer — read folder items only;
• Contributor — create items and folders (can’t read items);
• AvailabilityOnly — read Free/Busy info from the calendar;
• LimitedDetails — view availability data with calendar item subject and location;
• None — no permissions to access folders and files.

Get-MailboxFolderPermission username@domain.com:\calendar