Usermailbox in Office 365 with read only permissions

%3CLINGO-SUB%20id%3D%22lingo-sub-1478269%22%20slang%3D%22en-US%22%3EUsermailbox%20in%20Office%20365%20with%20read%20only%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478269%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Folks%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%20I%20have%20a%20customer%20requirement%20where%20users%20should%20have%20read%20only%20access%20on%20their%20own%20mailbox%20.%20They%20should%20only%20be%20able%20to%20see%20the%20incoming%20emails%20but%20they%20shouldn't%20be%20able%20to%20delete%20it%20%2Creply%20to%20it%20%2C%26nbsp%3B%20forward%20it%20or%20anything%20else%20apart%20from%20just%20reading%20the%20email%20which%20comes%20to%20their%20inbox%20.%20How%20can%20this%20be%20achieved%20%3F%20I%20tried%20the%20PowerShell%20commands%20but%20I%20couldn't%20find%20the%20right%20one%20as%20most%20of%20them%20where%20talking%20about%20setting%20permissions%20on%20another%20user's%20mailbox%20or%20permissions%20on%20a%20shared%20mailbox%20but%20none%20of%20them%20were%20related%20to%20altering%20the%26nbsp%3B%20existing%20permissions%20on%20the%20user's%20own%20mailbox%20.%20Could%20you%20folks%20please%20check%20and%20help%20me%20with%20some%20steps%20to%20achieve%20this%20%3F%20Thanks%20in%20advance%20.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1478269%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478516%22%20slang%3D%22en-US%22%3ERe%3A%20Usermailbox%20in%20Office%20365%20with%20read%20only%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478516%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F36255%22%20target%3D%22_blank%22%3E%40VIGNESH%20G%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20a%20really%20unusual%20request%20to%20place%20such%20limitations%20on%20a%20users%20own%20mailbox.%26nbsp%3B%20I'm%20not%20aware%20of%20any%20controls%20you%20could%20put%20in%20place%20to%20achieve%20this.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20you%20could%20try%20setting%20a%20transport%20rule%20to%20block%20outgoing%20messages%20from%20these%20users.%26nbsp%3B%20This%20would%20prevent%20them%20sending%2Freplying%2Fforwarding.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20deleting%20messages%20part%20is%20a%20bit%20trickier.%26nbsp%3B%20You%20may%20want%20to%20look%20at%20retention%20policies%20as%20an%20option%20here%20perhaps%20and%20apply%20a%20retain%20forever%20policy%20to%20the%20mailbox%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1480229%22%20slang%3D%22en-US%22%3ERe%3A%20Usermailbox%20in%20Office%20365%20with%20read%20only%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1480229%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F36255%22%20target%3D%22_blank%22%3E%40VIGNESH%20G%3C%2FA%3E%2C%20just%20use%20a%20mail-enabled%20Public%20folder%20instead%20of%20a%20user's%20mailbox.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi Folks ,

  I have a customer requirement where users should have read only access on their own mailbox . They should only be able to see the incoming emails but they shouldn't be able to delete it ,reply to it ,  forward it or anything else apart from just reading the email which comes to their inbox . How can this be achieved ? I tried the PowerShell commands but I couldn't find the right one as most of them where talking about setting permissions on another user's mailbox or permissions on a shared mailbox but none of them were related to altering the  existing permissions on the user's own mailbox . Could you folks please check and help me with some steps to achieve this ? Thanks in advance . 

2 Replies

@VIGNESH G 

 

This is a really unusual request to place such limitations on a users own mailbox.  I'm not aware of any controls you could put in place to achieve this.  

 

However, you could try setting a transport rule to block outgoing messages from these users.  This would prevent them sending/replying/forwarding.  

 

The deleting messages part is a bit trickier.  You may want to look at retention policies as an option here perhaps and apply a retain forever policy to the mailbox?

Hi @VIGNESH G, just use a mail-enabled Public folder instead of a user's mailbox.