User is able to open another user's Inbox folder without delegated Full Access

Cloud_Geek_82 901 Reputation points
2023-12-21T05:35:14.1066667+00:00

Hi All,

User A is delegated Send of Behalf and calendar Editor permission for a mailbox of User B.

User A is NOT delegated Full Access for a mailbox of User B.

It was found out that User A can open Inbox folder from desktop Outlook.

User A goes to File - Open & Export - Other User's Folder, then select user User B and folder Inbox and the entire Inbox folder of User B is opened in user's A Outlook.

How it is possible that User A can open User's B Inbox folder without having Full Access delegated permission?

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,171 questions
Outlook Windows Classic Outlook for Windows For business
{count} votes

Accepted answer
  1. Vasil Michev 119.5K Reputation points MVP Volunteer Moderator
    2023-12-21T08:11:42.46+00:00

    Folder-level permissions will also allow you access, the difference with Full access permissions is that the former are more granular. If your case, the user has likely been granted permissions not only on the Calendar folder, so double-check that (either via Outlook/OWA or the Get-MailboxFolderPermission cmdlet).

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Anonymous
    2023-12-21T08:21:34.9633333+00:00

    Hello @Cloud_Geek_82

    Could you provide a screenshot of user B's "Get-MailboxPermission" output?

    In addition, you can also check the following settings to see if inbox is "None"(file->account settings->Delegate Access->user A->permissions)

    In the "Delegate Access", please check whether user A has been granted "Inbox Permissions".

    User's image

    refer to: Manage another person's mail and calendar items

    User's image

    Regards

    SF

    1 person found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.