Mailbox Sync - Permissions import

2 min

Overview

This process manages the synchronization of mailbox permissions from a temporary import source into a primary permissions system. It ensures that user identities are correctly resolved, permissions are accurately updated, and obsolete or invalid entries are cleaned up.

Process Steps

Resolve User Identities: Attempt to match user identifiers from the import source against a directory cache using a prioritized sequence of identity fields (e.g., domain name, UPN, display name).
Handle Unknown Users: Assign a placeholder identifier to entries with unresolved or invalid user formats (e.g., system-generated SIDs).
Validation Check: If any user identities remain unresolved after the matching process, halt further processing and return the list of unresolved users for manual review or automated resolution.
Update Existing Permissions: Apply updates to existing permission records where matches are found between the import data and the current system.
Remove Permissions for Deleted Users: Identify and deactivate permissions associated with users marked as deleted in the directory cache.
Clean Up Missing Permissions: Deactivate any existing permissions that are no longer present