<#
.SYNOPSIS
Cmdlet to extract Access Rights for users

.DESCRIPTION
Details to be added

.EXAMPLE
Example to be added

.INPUTS
Identity

.OUTPUTS
Details to be added

.NOTES
Author:     Luke Leigh
Website:    https://blog.lukeleigh.com/
LinkedIn:   https://www.linkedin.com/in/lukeleigh/
GitHub:     https://github.com/BanterBoy/
GitHubGist: https://gist.github.com/BanterBoy

.LINK
https://github.com/BanterBoy


===========
Get-Mailbox |
Get-MailboxPermission |
Where-Object {$_.user.tostring() -ne "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false} |
Select-Object Identity,User,@{Name='Access Rights';Expression={[string]::join(', ', $_.AccessRights)}} |
Export-Csv -NoTypeInformation $directoryPath\mailboxpermissions.csv
===========

#>

[cmdletbinding(DefaultParameterSetName = 'default')]
param([Parameter(Mandatory = $false,
        HelpMessage = "Please enter an identity.",
        ValueFromPipeline = $false,
        ValueFromPipelineByPropertyName = $True)]
    [Alias('Id')]
    [string[]]
    $Identity
)

BEGIN {}

PROCESS {
    $userMailboxes = Get-Mailbox -Identity $Identity | Get-MailboxPermission | Where-Object { $_.user.tostring() -ne "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false } | Select-Object Identity, User, @{Name = 'AccessRights'; Expression = { [string]::join(', ', $_.AccessRights) } }
    foreach ($user in $userMailboxes) {
        try {
            $properties = @{
                Identity     = $user.Identity
                User         = $user.User
                AccessRights = $user.AccessRights
            }
        }
        catch {
            $properties = @{
                Identity     = $user.Identity
                User         = $user.User
                AccessRights = $user.AccessRights
            }
        }
        Finally {
            $obj = New-Object -TypeName PSObject -Property $properties
            Write-Output $obj
        }
    }
}