Add- AD Permission

The Add-ADPermission cmdlet is used to add permissions to Active Directory objects, most often "Send-As" rights. The key parameter to use with this cmdlet is the ExtendedRights parameter. For example, to give User2 Send As rights against User1’s mailbox, our cmdlet is:

Add-ADPermission User1 –User DOMAIN\User2 –ExtendedRights “Send As”

To remove this right, you would use the same parameters with the Remove-ADPermission cmdlet.