Forum Discussion
User with full access to shared mailbox can't open protected email in Outlook
There are two primary ways to establish delegated access to a mailbox.
One is OWA delegation, in this case, the delegated user logs in as Delegated which does not grant access to the mailbox's email either in OWA or in Outlook.
The other scenario is mailbox delegation from ECP. In that case, when logging in through OWA the user will request licenses in the context of the mailbox and as such they user will get access to content protected for the mailbox.
We are working to bringing these behaviors into alignment, so both through OWA or through Outlook, you can control whether the user with delegated access to a mailbox is granted licenses to the content protected to the mailbox.
Regarding a group, what you describe would still not work, since even using a group, rights have only been granted to the mailbox, not to the group, so only the mailbox, and not the groups of which the mailbox is part, get access.
Yes, using an O365 group would have addressed this better than a shared mailbox, but we realize that solution is not ideal for all scenarios, so we are working to enable the shared mailbox users to get access to content in the mailbox regardless of the client. Hopefully we will have this ready in coming months.
HTH
Hi Esaggese,
I wanted to follow up on this thread as it has been several months now. You had mentioned in March of this year:
"For other Delegated Access scenarios (e.g. admin assistant) we intend to provide administrator-level control to define whether access should be granted or not, but this is further down the road.
Hope this helps."
Has there been any updates regarding development on this? Essentially, I'm curious if there is a way to PREVENT certain admin assistants who normally have full control as a delegate of the mailbox from reading certain messages. So emails marked with a certain policy would only be available to open by the user's mailbox, with the admin unable to read/view.
Thank you and I look forward to hearing from you.
I would also like to know if there has been any update to this. Thank you.
ScottVAMT Access to protected content sent to a shared mailbox is in the market now for users directly being granted access to the mailbox. We still don't have a solution for users that are granted access to the mailbox via a group. We will continue working on it.
