[REWST - TASK] EXO Set Permissions

This workflow automates the assignment of Exchange Online mailbox permissions (Full Access and Send As) with granular control over automapping functionality, serving as a reusable building block in larger processes like employee onboarding and access management. MSPs can leverage this workflow to standardize mailbox delegation across multiple clients, efficiently respond to permission-related tickets, and implement consistent access controls during staff role changes without manual PowerShell commands. Technically, the workflow evaluates input parameters to determine the appropriate permission type, checks automapping preferences, executes the corresponding Exchange Online PowerShell commands through Rewst's EXO integration, and returns standardized results that can be consumed by parent workflows or ticketing systems.

This workflow contains 9 tasks.

Inputs

• access_recipient - string

  • List of Azure / Entra GUIDs that will receive access to the offboarded user's mailbox.

• mailbox_to_share - string

  • GUID of the Azure / Entra user.

• shared_mailbox_no_automap - boolean

  • If set to true, then the offboarded user's mailbox will not be automapped to user's that were granted acces to it.

• shared_mailboxes_allow_send_as - boolean

  • If set to true, then user's who were granted access will also be granted Send As access.

Outputs

• automation_log: Standardized Rewst automation log

• success: Boolean; States if workflow was successful.

Key tasks

• failed: Core integration: noop

• full_access_no_automap: Microsoft Exchange Online integration: InvokeCommand

• update_output: Data modification

• check_automap_shared_mailbox: Validation/verification

• add_sendas_access: Communication/notification

Jinja examples

Example 1

{{ - data_ns.status - }}

Used in publishing 'automation_log'

Example 2

{{ - data_ns.status < 2000 - }}

Used in publishing 'automation_log'