Share via

Mail enabled security group.

Sophia 366 Reputation points
2021-07-15T20:25:12.667+00:00

Hello folks,

I have recently migrated a whole bunch of Shared mailboxes to Exchange online.

The security groups that have the members with permissions to those mailboxes are not able to access them. The group scope is Universal and the have email address.

The groups sync up to the Exchange online and I can check their memberships. What could be cause of this?

Thanks,

Exchange Online
Exchange Online

A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.

Exchange | Exchange Server | Management
Exchange | Exchange Server | Management

The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.

Exchange | Hybrid management
Exchange | Hybrid management

The administration of a hybrid deployment that connects on-premises Exchange Server with Exchange Online, enabling seamless integration and centralized control.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Joyce Shen - MSFT 16,706 Reputation points
    2021-07-16T02:37:54.927+00:00

    Hi @Safs-3080

    Please run the command below to check the permission for the shared mailbox 

    Get-MailboxPermission -Identity ******@XX.com | Format-List

    If you see "isinherited" is false, it will go through. However there will still be instances where middle of the migration some new mailboxes will be created. For that, run a script at cloud to add those to migrated mailboxes.

    According to the official document we can know that, Mailbox permissions migration: On-premises mailbox permissions such as Send As, Full Access, Send on Behalf, and folder permissions, that are explicitly applied on the mailbox are migrated to Exchange Online. Inherited (non-explicit) mailbox permissions and permissions granted to objects that aren't mail enabled in Exchange Online are not migrated. You should ensure all permissions are explicitly granted and all objects are mail enabled prior to migration. Therefore, you have to plan for configuring these permissions in Exchange Online if applicable for your organization. In the case of Send As permissions, if the user and the resource attempting to be sent as aren't moved at the same time, you'll need to explicitly add the Send As permission in Exchange Online using the Add-RecipientPermission cmdlet.

    So re-apply the permissions after the migration will be a resolution.

    Below is also an article introduces about the similar topic for your reference as well: Migrated permissions of migrated mailboxes in Exchange Hybrid based environment

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.