In Exchange 2013, Exchange Admin Center (EAC) or PowerShell commands can be used to assign rights to users or a group of users (also termed as delegates) so that they can access other mailboxes to read or send messages. The permissions can be assigned to all types of mailboxes supported by Exchange Server including user, linked, resource, and shared mailbox. Also, there is flexibility to assign rights to the following groups:
#: Mail Enabled Group
#: Dynamic Distribution Group
#: Distribution Group
This ascertains that the delegates can send emails on behalf of their group. There are different types of permissions that can be assigned to the mailboxes:
Full Access: If a delegate has full access to the mailbox, it will allow them to open and access contents of the mailbox. Nevertheless, it does not permit the delegate to send any message from the mailbox and for this, the Send as permissions must be assigned. This type of access cannot be configured while setting permissions for the group.
Send As: If the Send As permission is assigned to the mailbox, the delegate will have the right to send emails. The emails at the receiver’s end will appear to have arrived from the mailbox owner only. Nevertheless, it should be noticed that this will only allow opening the mailbox but restricts the delegate to sign in to the mailbox. On the other hand, if the Send As permission is set to a group, the message will appear to have come from the group only.
Send on Behalf: This permission is similar to that of Send As. However, the difference is, the “From” field will have email address of the delegate and not the mailbox owner. This permission is not available for Shared mailboxes.
The following steps will help to grant full access to the user mailbox through Exchange Admin Center.
Note: If the recipients list is long, a particular user can be searched out by entering the name in the “Search” box.
To assign full access to mailbox using PowerShell, use the “Add-MailboxPermission” cmdlet. For example: To assign full access permission to “Mark Samuel” for the mailbox “Alena Louis”, following command can be run.
Add-MailboxPermission -Identity “Alena Louis” –User Mark Samuel -AccessRights FullAccess -InheritanceType all
Here, the parameter “InheritanceType all” specifies that the permission is inherited by all folder of the mailboxes.
Granting full mailbox access for a user in Exchange Server 2013 is a simplified task that can be successfully done using EAC or PowerShell. However, while granting the rights, it should be assured that the delegate uses it in authorized way.
Check if you also want to know “How to Assign Full Access Permission in Exchange 2010“