Forum Discussion
Restrict users from deleting emails in Shared Mailbox
- Please, if you can tell me next:
I'm using Office 365 online, and i want to create one shared mailbox for many users.
I want that nobody can delete nothing from Inbox and sub folders.
So my question is this:
1. When new shared mailbox is created, does it have to have some user in members area?
2. I did removed everybody through EAC from members list, and accessed shared mailbox through web, and gave a user A permission of "Reviewer" and nothing happens, when i try to open shared mailbox with that user A, it shows an error message.Hi Josipakd .... will share my story with you 😉
I could not achieve what I needed using EAC and Outlook to specify Reviewer for users - not sure what I was doing wrong but it was driving me crazy for several days.... So I gave up and eventually, I decided to try that "powershell way" and was really easy and works nicely... Have no problem with adding users to shared mailboxes and restrict "delete" for them... The only annoying thing is that you need to specify all folders you want to set the restrictions for
See my template that I use:
Add-MailboxPermission -Identity YourSharedMailboxEmail -User 'YourUserEmail' -AccessRights ReadPermission
Add-MailboxFolderPermission -Identity MailboxName:\ -User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\Inbox -User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\Outbox -User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\'Sent Items'-User YourUserEmail -AccessRights Reviewer
Add-MailboxFolderPermission -Identity MailboxName:\'Junk Email' -User YourUserEmail -AccessRights Reviewer- "YourSharedMailboxEmail" will be email address of your shared mailbox (e.g. ITstuff_at_domain.com)
- "MailboxName" will be the name of yout shared mailbox (e.g. "ITStuff")
Once done the above, you will then manually add the shared mailbox for required users:
- in Outlook, go to Account -> open user account -> More Settings -> Advanced -> add your shared mailbox into the Mailboxes field.
This way, the user will see ONLY the folders mentioned above and will not be able to delete emails etc...
- is there any guide about how to utilize folder-level permission? Have no idea aobut how to do it 🙂 ...I can remove full access if required.
- Right-click on a folder > Properties > Permissions 🙂 If you want to automate things, use PowerShell and the Add-MailboxFolderPermission cmdlet: https://docs.microsoft.com/en-us/powershell/module/exchange/add-mailboxfolderpermission?view=exchange-ps
- ideally I do it via GUI and so.... Not good with PowerShell 🙂
Folder - should I do it in Outlook? ... I mean... right-click on Inbox folder of shared mailbox and do it there?
How do I remove full access please? Should I remove delegates in EAC?
