Forum Discussion
Restrict users from deleting emails in Shared Mailbox
Hi team,
is there a way to restrict ppl from deleting emails in a shared mailbox? We are using Exchange Online.
27 Replies
try with the new one... without adding members....
if doesnt work, add members and then run the script so that you will modify their permissions... as I can see members/delegations for the users that have Reviewer access... Did it few months ago last time so I may be wrong with "not adding users as members" in EAC ... 😉
Good luck 😉
- You can use folder-level permissions for that. If you are using Full Access, there is no way to restrict deleting.
- Please, if you can tell me next:
I'm using Office 365 online, and i want to create one shared mailbox for many users.
I want that nobody can delete nothing from Inbox and sub folders.
So my question is this:
1. When new shared mailbox is created, does it have to have some user in members area?
2. I did removed everybody through EAC from members list, and accessed shared mailbox through web, and gave a user A permission of "Reviewer" and nothing happens, when i try to open shared mailbox with that user A, it shows an error message.Hi Josipakd .... will share my story with you 😉
I could not achieve what I needed using EAC and Outlook to specify Reviewer for users - not sure what I was doing wrong but it was driving me crazy for several days.... So I gave up and eventually, I decided to try that "powershell way" and was really easy and works nicely... Have no problem with adding users to shared mailboxes and restrict "delete" for them... The only annoying thing is that you need to specify all folders you want to set the restrictions for
See my template that I use:
Add-MailboxPermission -Identity YourSharedMailboxEmail -User 'YourUserEmail' -AccessRights ReadPermission
Add-MailboxFolderPermission -Identity MailboxName:\ -User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\Inbox -User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\Outbox -User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\'Sent Items'-User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\'Junk Email' -User YourUserEmail -AccessRights Reviewer- "YourSharedMailboxEmail" will be email address of your shared mailbox (e.g. ITstuff_at_domain.com)
- "MailboxName" will be the name of yout shared mailbox (e.g. "ITStuff")
Once done the above, you will then manually add the shared mailbox for required users:
- in Outlook, go to Account -> open user account -> More Settings -> Advanced -> add your shared mailbox into the Mailboxes field.
This way, the user will see ONLY the folders mentioned above and will not be able to delete emails etc...
- is there any guide about how to utilize folder-level permission? Have no idea aobut how to do it 🙂 ...I can remove full access if required.
- Right-click on a folder > Properties > Permissions 🙂 If you want to automate things, use PowerShell and the Add-MailboxFolderPermission cmdlet: https://docs.microsoft.com/en-us/powershell/module/exchange/add-mailboxfolderpermission?view=exchange-ps
