Manage Send on Behalf Permissions With Powershell

This is a guide to managing send on behalf and send as permissions with PowerShell in Office 365.

In this guide you’ll learn:

  • Give Send on Behalf Permissions With PowerShell
  • Get Send on Behalf Permissions with PowerShell
  • Give Send As Permissions with PowerShell
  • Get Send As Permissions with PowerShell

Tip #1 – A user delegated Send As permission is not allowed to open a mailbox to read the emails.  It only allows the delegate given Send As permission to send emails as if they were the owner of that mailbox.  The recipient of the email will not see a difference between the owner of the mailbox and the user that has been delegated to Send As the owner of the mailbox. 

Tip #2 – A user delegated Send on Behalf permission is not allowed to open a mailbox to read the emails.  It only allows the delegate given Send on Behalf permission to send emails on behalf of the owner of the mailbox.  The recipient of the email will see a message Sent on Behalf of in the sender address. Refer to the article grant full office 365 mailbox permissions if you want the delegate to open the mailbox with full permissions.

Prerequisites: Minimum Office 365 Admin Role(s) needed to accomplish this task:  Exchange Recipient Administrator

Give Send on Behalf Permissions With PowerShell

Step 1: Connect to Exchange Online

Refer to the article Connect to exchange online with Powershell if you need steps on how to connect.

Step 2: Use the Set-Mailbox cmdlet

We will use the Set-Mailbox cmdlet to give Send on Behalf permissions. In the example below, we give the user ‘123 User’ Send on Behalf permissions to the mailbox ‘ABC User’.

Set-Mailbox -Identity 'ABC User' -GrantSendonBehalfTo '123 User'

Get Send on Behalf Permissions with PowerShell

To verify send on half permissions, you can use the Get-Mailbox cmdlet to view permissions. In the example below, we check the Send on Behalf permissions on the mailbox ‘ABC User’.

Get-Mailbox -Identity 'ABC User' | Format-List GrantSendonBehalfTo
Get-Mailbox cmdlet

Give Send As Permissions with PowerShell

Step 1: Connect to Exchange Online

Refer to the article Connect to exchange online with Powershell if you need steps on how to connect.

Step 2: Use Add-RecipientPermission

We will use the Add-RecipientPermission cmdlet to give Send As permissions.  In the example below, we give the user ‘123 User’ Send As permissions to the mailbox ‘ABC User’.

Add-RecipientPermission "ABC User" -AccessRights SendAs -Trustee "123 User"
Add-RecipientPermission cmdlet

Get Send As Permissions with PowerShell

To verify the permissions, you can run the Get-RecipientPermission cmdlet to view permissions on the mailbox.  In the example below, we check permissions on the mailbox ‘ABC User’.

Get-RecipientPermission "ABC User"
Get-RecipientPermission cmdlet

In my opinion, managing users mailbox permissions is much easier and faster with PowerShell. With the admin portal, it takes several clicks to accomplish what I covered in this guide.

Post your questions or comments below.

Recommended Tool: Permissions Analyzer for Active Directory

This FREE tool lets you get instant visibility into user and group permissions and allows you to quickly check user or group permissions for files, network, and folder shares.

You can analyze user permissions based on an individual user or group membership.

This is a Free tool, download your copy here.

Leave a Comment