Forum Discussion

arunkr's avatar
arunkr
Copper Contributor
Feb 14, 2025

distribution list members unable to read encrypted emails

One of our tenants has Business Premium licenses. We have a mailbox called "statements" that has forwarding enabled to a mail-enabled security group (Statement1). When someone within the organization sends an email to an individual and keeps the "statements" mailbox in CC, and the email is encrypted, members of the Statement1 security group are unable to read the encrypted email.

We’ve created a mail rule for the Statement1 security group, but members are still unable to read the encrypted email.

The error message they receive is:

"You don't have sufficient permission to open this email."

output of Get-IRMConfiguration

InternalLicensingEnabled                   : True

ExternalLicensingEnabled                   : True

AzureRMSLicensingEnabled                   : True

 

Biz Pre License is assigned to all the members of the security group Statement1.

 

Please help in fixing this issue. 

2 Replies

  • That's by design, only direct recipients of the messages will be able to read it. Forwarding the message to another recipient is not something that will allow them to read it, unless the label used specifically includes those recipients (or the domain).

    Perhaps consider replacing the current setup of a mailbox + DG with a Microsoft 365 Group? That way you can have both a mailbox (and site) and group-like behavior. It will allow you to get rid of the forwarding, and any of the group members should be able to read encrypted messages addressed to the group.

    • arunkr's avatar
      arunkr
      Copper Contributor

      Thank you will try that and update.

Resources