How to grant Exchange and Outlook mailbox permissions in Office 365 dedicated

Article translations Article translations
Article ID: 2572646 - View products that this article applies to.
This article describes the various kinds of mailbox permissions that can be granted and how those permissions are granted in Microsoft Exchange Online and in Microsoft Outlook in Microsoft Office 365 dedicated/ITAR. There are several kinds of mailbox permissions that can be granted. Each permission is administered separately.

Note If full access permissions and "Send on Behalf" permissions are granted to a mailbox, users will actually send as the mailbox owner. This is expected behavior. For more information about this behavior and about a workaround that involves Microsoft Outlook 2010, click the following article number to view the article in the Microsoft Knowledge Base:
2688358 A delegate of a mailbox cannot send an email message on behalf of the mailbox owner in Office 365 dedicated
How to add full access permissions
Full access permissions let a user directly sign in to a mailbox by using Outlook or Outlook Web Access (OWA) and then add that mailbox as a secondary mailbox in Outlook. However, full access permissions do not let the user send as or send on behalf of the mailbox. Those permissions are granted separately.

Exchange 2013

Exchange Admin Center (EAC)

Remote PowerShell (RPS)

You can find step-by-step instructions for EAC and RPS at Manage Permissions for Recipients.

Exchange 2010

Customer Management Portal (CMP)
Remote PowerShell (RPS)

You can find more information about the RPS Add-MailboxPermission cmdlet at Add-MailboxPermission.
How to add delegate/"send on behalf" permissions (end-user)
Delegates can be granted permissions to folders, can receive meeting invites, and can receive "send on behalf" permissions for the mailbox. In Exchange 2010, users can set delegates in Outlook only for their own mailboxes. Users cannot set delegates for shared mailboxes.

These permissions are added through Outlook. For more information, see the following articles.

Outlook 2013
Allow someone else to manage your mail and calendar

Outlook 2010
Allow someone else to manage your mail and calendar

Outlook 2007
Allow someone else to manage your mail and calendar

Users who are members of the "E2010-MSO Self Service - Mailbox Permissions" role group can set "send on behalf" permissions and add delegates. Delegates can be added by the users in Outlook, and then the users are granted "send on behalf" permissions automatically. Or, "send on behalf" permissions can be added by using the Add-MailboxFolderPermission Windows Remote PowerShell command.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
2545238 You cannot add delegates in Outlook by using Exchange 2010
For more information about the Add-MailboxFolderPermission command, go to the following Microsoft websites.

Self-service guide
Microsoft Exchange Online for Enterprises Release Documentation & Training Material
TechNet
Add-MailboxFolderPermission


How to add "send on behalf" permissions (administrator)
"Send on behalf" permissions grant the user the ability to send mail from another user's mailbox. These permissions are synced through Microsoft Managed Solutions Service Provisioning Provider (MMSSPP) from the company's source environment. The value of this attribute overwrites any value that is set in the managed domain by Outlook or by Microsoft Online Services Support. After a mailbox is migrated, this value in the customer's source environment should be removed.

These permissions can be added in three ways:
  1. They can be synced from the partner's environment through MMSSPP. The value of this attribute in the partner's environment overrides the property that is set in the managed environment. This attribute should be cleared after a mailbox is migrated to the managed environment.
  2. They can be added when the delegate is added in Outlook.
  3. Administrators can also grant "send on behalf" permissions in the managed environment.
Exchange 2013

Exchange Admin Center (EAC)
Remote PowerShell (RPS)

You can find step-by-step instructions for EAC and RPS at Manage Permissions for Recipients.

Exchange 2010

Customer Management Portal (CMP)
Remote PowerShell (RPS)

You can find more information about the RPS Set-Mailbox cmdlet at Set-Mailbox.
How to add "send as" permissions
"Send as" permissions grant the ability to send as a specific mailbox from Outlook and from OWA.

The following permissions can be added:
  • They can be synced from the customer's environment through Microsoft Managed Solutions Service Provisioning Provider. "Send as" permissions in the customer's environment are added to any "send as" permissions in the managed environment.
  • Administrators can also grant "send on behalf" permissions in the managed environment.
Exchange 2013
Exchange Admin Center (EAC)
Remote PowerShell (RPS)

You can find step-by-step instructions for EAC and RPS at Manage Permissions for Recipients.


Exchange 2010

Customer Management Portal (CMP)

Remote PowerShell (RPS)

You can find more information about the RPS Add-ADPermission cmdlet at Add-ADPermission.

How to add mailbox folder permissions (end-user)
Mailbox folder permissions grant access to specific folders in a mailbox through Outlook. The user cannot sign in to the mailbox by using OWA or Outlook without a specific configuration.

These permissions can be added by using the method that is described in the following Outlook articles.

Outlook 2013
Manage another person's mail and calendar items

Outlook 2010
Manage another person's mail and calendar items

Outlook 2007
Manage another person's mail and calendar items

How to add mailbox folder permissions (administrator)
Use the Add-MailboxFolderPermission cmdlet to manage folder-level permissions for all folders in a user's mailbox.

Exchange 2013

Remote PowerShell (RPS)
You can find step-by-step instructions for the RSP Add-MailboxFolderPermission cmdlet at Add-MailboxFolderPermission.

Exchange 2010
Remote PowerShell (RPS)
You can find more information about the RPS Add-MailboxFolderPermission cmdlet at Add-MailboxFolderPermission.
Expand all | Collapse all

Properties

Article ID: 2572646 - Last Review: April 16, 2014 - Revision: 11.1
Applies to
  • Microsoft Business Productivity Online Dedicated
  • Microsoft Business Productivity Online Suite Federal
  • Microsoft Exchange Online
Keywords: 
vkbportal226 KB2572646

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com