This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 35%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E1%3C/text%3E%3C/svg%3E)
Hi,
My organization has hundreds of shared mailboxes that I need to periodically assign users to them.
The users need to have full permission including: reading, writing and sending as well as sending as and on behalf of.
From all I read its impossible to add groups which would have made my life easier.
Is there an easy way to to manage this? Is there a form of security group that I can assign to specific shared mailboxes and give access this way?
Ideally I would create a group per team and give them access to these shared mailboxes
Any help or suggestions are highly appreciated!
You can use a mail-enabled security group.
Note that when you use groups to assign perms like this, the shared mailbox will not be auto-mapped in Outlook.
The user with full access will need to add the shared mailbox manually to their outlook profile.
I tried that,
I went in to groups and created O365 group with an email. However that groups is not appearing in the available options for members inside the shared mailbox.
I am guessing I am doing something wrong but I cant figure it out yet. Any suggestions what might be causing this issue or possibly a step by step guide to create this mail-enabled security group?
Many thanks!
Can you post how you did this?
Its pretty much an Exchange Powershell command:
You can create a universal security group in AD then mai-enable.
Enable-DistributionGroup -Identity <Universal Security Group>
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 82%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEY%3C/text%3E%3C/svg%3E)
Hi,
Are you using Exchange online or hybrid?
If only Exchange online, steps should be:
1 Create mail-enabled security group:
https://learn.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-mail-enabled-security-groups#use-powershell-to-manage-mail-enabled-security-groups
2 Give permissions to the security group, the group you just created should exist in the list when you click "add permission" :
https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/give-mailbox-permissions-to-another-user?view=o365-worldwide
3 Edit group members:
https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/add-or-remove-members-from-groups?view=o365-worldwide
I am writing here to confirm with you how the thing going now?
If you need further help, please provide more detailed information, so that we can give more appropriate suggestions.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi,
This helped! creating it via PS solved group creation issue.
Has someone figured out how to automap shared mailboxes on to members of the groups that have received rights?
Many thanks for your help!
As the link Andy posts, the AutoMapping feature was never intended for use in conjunction with security groups.
Automapping works via the user who is granted permissions being stamped on the msExchDelegateLinkList attribute of the target object. This attribute only lists mail objects and not groups. No change with 2016 (or O365, which runs a version of 2016 at the moment)