Adding non-employee email addresses to Exchange Online Global Address List (GAL)

IT 140 Reputation points
2023-11-23T12:16:58.5433333+00:00

My management wants me to add non-employee email addresses, such as parent emails and frequent contact suppliers, to our Exchange Online Global Address List (GAL).

What is the best practice for this and how can I ensure it is secure?

Microsoft Exchange Online
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,317 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 100.1K Reputation points MVP
    2023-11-23T16:54:01.1733333+00:00

    That's what Mail contacts are for: https://learn.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-mail-contacts

    Security-wise, there's nothing to be concerned about here, you are simply creating a "placeholder" for a given address. It's not an actual user, it cannot be used to access any resources or expose company data.

    1 person found this answer helpful.