How to grant Exchange and Outlook mailbox permissions in Office 365 dedicated

This article describes the various kinds of mailbox permissions that can be granted and how those permissions are granted in Microsoft Exchange Online and in Microsoft Outlook in Microsoft Office 365 dedicated/ITAR. There are several kinds of mailbox permissions that can be granted. Each permission is administered separately.

Note If full access permissions and "Send on Behalf" permissions are granted to a mailbox, users will actually send as the mailbox owner. This is expected behavior. For more information about this behavior and about a workaround that involves Microsoft Outlook 2010, click the following article number to view the article in the Microsoft Knowledge Base:
2688358 A delegate of a mailbox cannot send an email message on behalf of the mailbox owner in Office 365 dedicated
How to add full access permissions
Full access permissions let a user directly sign in to a mailbox by using Outlook or Outlook Web Access (OWA) and then add that mailbox as a secondary mailbox in Outlook. However, full access permissions do not let the user send as or send on behalf of the mailbox. Those permissions are granted separately.

Exchange 2013

Exchange Admin Center (EAC)

Remote PowerShell (RPS)

You can find step-by-step instructions for EAC and RPS at Manage Permissions for Recipients.

Exchange 2010

Customer Management Portal (CMP)
Remote PowerShell (RPS)

You can find more information about the RPS Add-MailboxPermission cmdlet at Add-MailboxPermission.
How to add delegate/"send on behalf" permissions (end-user)
Delegates can be granted permissions to folders, can receive meeting invites, and can receive "send on behalf" permissions for the mailbox. In Exchange 2010, users can set delegates in Outlook only for their own mailboxes. Users cannot set delegates for shared mailboxes.

These permissions are added through Outlook. For more information, see the following articles.

Users who are members of the "E2010-MSO Self Service - Mailbox Permissions" role group can set "send on behalf" permissions and add delegates. Delegates can be added by the users in Outlook, and then the users are granted "send on behalf" permissions automatically. Or, "send on behalf" permissions can be added by using the Add-MailboxFolderPermission Windows Remote PowerShell command.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
2545238 You cannot add delegates in Outlook by using Exchange 2010
For more information about the Add-MailboxFolderPermission command, go to the following Microsoft websites.

Self-service guide
TechNet


How to add "send on behalf" permissions (administrator)
"Send on behalf" permissions grant the user the ability to send mail from another user's mailbox. These permissions are synced through Microsoft Managed Solutions Service Provisioning Provider (MMSSPP) from the company's source environment. The value of this attribute overwrites any value that is set in the managed domain by Outlook or by Microsoft Online Services Support. After a mailbox is migrated, this value in the customer's source environment should be removed.

These permissions can be added in three ways:
  1. They can be synced from the partner's environment through MMSSPP. The value of this attribute in the partner's environment overrides the property that is set in the managed environment. This attribute should be cleared after a mailbox is migrated to the managed environment.
  2. They can be added when the delegate is added in Outlook.
  3. Administrators can also grant "send on behalf" permissions in the managed environment.
Exchange 2013

Exchange Admin Center (EAC)
Remote PowerShell (RPS)

You can find step-by-step instructions for EAC and RPS at Manage Permissions for Recipients.

Exchange 2010

Customer Management Portal (CMP)
Remote PowerShell (RPS)

You can find more information about the RPS Set-Mailbox cmdlet at Set-Mailbox.
How to add "send as" permissions
"Send as" permissions grant the ability to send as a specific mailbox from Outlook and from OWA.

The following permissions can be added:
  • They can be synced from the customer's environment through Microsoft Managed Solutions Service Provisioning Provider. "Send as" permissions in the customer's environment are added to any "send as" permissions in the managed environment.
  • Administrators can also grant "send on behalf" permissions in the managed environment.
Exchange 2013
Exchange Admin Center (EAC)
Remote PowerShell (RPS)

You can find step-by-step instructions for EAC and RPS at Manage Permissions for Recipients.


Exchange 2010

Customer Management Portal (CMP)

Remote PowerShell (RPS)

You can find more information about the RPS Add-ADPermission cmdlet at Add-ADPermission.

How to add mailbox folder permissions (end-user)
Mailbox folder permissions grant access to specific folders in a mailbox through Outlook. The user cannot sign in to the mailbox by using OWA or Outlook without a specific configuration.

These permissions can be added by using the method that is described in the following Outlook articles.

Outlook 2013Outlook 2010Outlook 2007
How to add mailbox folder permissions (administrator)
Use the Add-MailboxFolderPermission cmdlet to manage folder-level permissions for all folders in a user's mailbox.

Exchange 2013

Remote PowerShell (RPS)
You can find step-by-step instructions for the RSP Add-MailboxFolderPermission cmdlet at Add-MailboxFolderPermission.

Exchange 2010
Remote PowerShell (RPS)
You can find more information about the RPS Add-MailboxFolderPermission cmdlet at Add-MailboxFolderPermission.
Properties

Article ID: 2572646 - Last Review: 12/25/2015 09:19:00 - Revision: 12.0

Microsoft Business Productivity Online Dedicated, Microsoft Business Productivity Online Suite Federal, Microsoft Exchange Online

  • vkbportal226 KB2572646
Feedback