User-Control Access to Shared Mailbox

Roger Seekell 96 Reputation points
2020-08-07T14:02:48.297+00:00

I've created a series of shared mailboxes, and now a lot of people have permission change requests. I want to find a way to empower them (average users) to control permission to their shared mailboxes. For each mailbox, I created a mail-enabled security group that controls permission.

Is there a way for the average user to make changes to a mail-enabled security group for which they are an owner?

I see that there's a place in webmail to review groups that one is a member or owner of, but that seems limited to O365 groups. I see a place in settings to control distribution groups that I own, but I don't see mail-enabled security groups there.

How can I set up owners of these security groups to be able to add/remove members on their own, thereby controlling access to the shared mailboxes?

Thanks.

Exchange Exchange Server Management
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 157.4K Reputation points MVP Volunteer Moderator
    2020-08-07T18:36:35.783+00:00

    It should prevent them from being seen yes. That has always been my experience

    Also see:
    https://support.microsoft.com/en-us/help/2813640/the-owner-of-a-mail-enabled-security-group-in-office-365-can-t-manage

    0 comments No comments

5 additional answers

Sort by: Most helpful
  1. Roger Seekell 96 Reputation points
    2020-08-07T18:38:46.713+00:00

    OK, I have tested it, and it has proven to be so. Thanks for the tip! That's the article I was looking for but couldn't seem to find. :)

    1 person found this answer helpful.
    0 comments No comments

  2. Andy David - MVP 157.4K Reputation points MVP Volunteer Moderator
    2020-08-07T14:06:03.803+00:00

    Unless you give them scoped Exchange Admin permissions or create a process to that, shared mailboxes owners can only delegate folders within the mailbox itself - just like their own. They wont be able to give someone full or send as permission to that shared mailbox.

    0 comments No comments

  3. Roger Seekell 96 Reputation points
    2020-08-07T14:25:47.553+00:00

    No, I am asking about the mail-enabled security group. How can the owner of a mail-enabled security group add/remove members (without being an Exchange Admin)? The fact that the group connects to a shared mailbox is only background information. Thanks.

    0 comments No comments

  4. Andy David - MVP 157.4K Reputation points MVP Volunteer Moderator
    2020-08-07T15:46:19.187+00:00

    Well, if they are mail-enabled, then owners can add and remove members via Outlook unless you have blocked that.
    Is that what you mean? Just want to make sure I understand the ask, sorry.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.