{"id":4231,"date":"2022-07-07T11:02:40","date_gmt":"2022-07-07T18:02:40","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4231"},"modified":"2022-07-07T11:02:48","modified_gmt":"2022-07-07T18:02:48","slug":"how-to-manage-permissions-for-recipients-in-exchange-server","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4231","title":{"rendered":"How to Manage Permissions for Recipients in Exchange Server"},"content":{"rendered":"\n

In Exchange Server, you can use the Exchange admin center (EAC) or the Exchange Management Shell to assign permissions to a mailbox or group so that other users can access the mailbox (the Full Access permission), or send email messages that appear to come from the mailbox or group (the Send As or Send on Behalf permissions). The users that are assigned these permissions on other mailboxes or groups are called delegates<\/em>.<\/p>\n\n\n\n

The permissions that you can assign to delegates for mailboxes and groups in Exchange Server are described in the following table:<\/p>\n\n\n\n

Note<\/strong>: Although you can use the Exchange Management Shell to assign some or all of these permissions to other delegate types on other kinds of recipient objects, this topic focuses on the delegate and recipient object types that produce useful results.<\/p>\n\n\n\n

Permission<\/th>Description<\/th>Recipient types in the EAC<\/th>Additional recipient types in PowerShell<\/th>Delegate types in the EAC<\/th>Additional delegate types in the PowerShell<\/th><\/tr><\/thead>
Full Access<\/strong><\/td>Allows the delegate to open the mailbox, and view, add and remove the contents of the mailbox. Doesn’t allow the delegate to send messages from the mailbox.If you assign the Full Access permission to a mailbox that’s hidden from address lists, the delegate won’t be able to open the mailbox. By default, arbitration and discovery mailboxes are hidden from address lists.By default, the mailbox auto-mapping feature uses Autodiscover to automatically open the mailbox in the delegate’s Outlook profile (in addition to their own mailbox). Note that auto-mapping will only work for individual users granted the proper permissions and will not work for any kind of group. If you don’t want mailboxes to be auto-mapped, you need to take one of the following actions:Use the Add-MailboxPermission<\/strong> cmdlet in the Exchange Management Shell to assign the Full Access permission with the -AutoMapping $false<\/code> setting. For more information, see the Use the Exchange Management Shell to assign the Full Access permission to mailboxes<\/a> section in this topic.Assign the Full Access permission to a (mail-enabled) security group. The mailbox won’t open in the Outlook profile of each member.<\/td>User mailboxesLinked mailboxesResource mailboxesShared mailboxes<\/td>Arbitration mailboxesDiscovery mailboxes<\/td>Mailboxes with user accountsMail users with accountsMail-enabled security groups<\/td>User accounts that aren’t mail-enabled.Universal, global, and domain local security groups that aren’t mail-enabled.<\/td><\/tr>
Send As<\/strong><\/td>Allows the delegate to send messages as if they came directly from the mailbox or group. There’s no indication that the message was sent by the delegate.Doesn’t allow the delegate to read the contents of the mailbox.If you assign the Send As permission to a mailbox that’s hidden from address lists, the delegate won’t be able to send messages from the mailbox.<\/td>User mailboxesLinked mailboxesResource mailboxesShared mailboxesDistribution groupsDynamic distribution groupsMail-enabled security groups<\/td>n\/a<\/td>Mailboxes with user accountsMail users with accountsMail-enabled security groups<\/td>n\/a<\/td><\/tr>
Send on Behalf<\/strong><\/td>Allows the delegate to send messages from the mailbox or group. The From address of these messages clearly shows that the message was sent by the delegate (” <Delegate><\/em> on behalf of <MailboxOrGroup><\/em>“). However, replies to these messages are sent to the mailbox or group, not to the delegate.Doesn’t allow the delegate to read the contents of the mailbox.If you assign the Send on Behalf permission to a mailbox that’s hidden from address lists, the delegate won’t be able to send messages from the mailbox.<\/td>User mailboxesLinked mailboxesResource mailboxesDistribution groupsDynamic distribution groupsMail-enabled security groups<\/td>Shared mailboxes<\/td>Mailboxes with user accountsMail users with accountsMail-enabled security groupsDistribution groups<\/td>n\/a<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

 Note<\/p>\n\n\n\n

If a user has both Send As and Send on Behalf permissions to a mailbox or group, the Send As permission is always used.|User mailboxes<\/p>\n\n\n\n

<\/a>What do you need to know before you begin?<\/h2>\n\n\n\n