🎉 Our Office 365 Reporting Tool is now available in Azure Marketplace 🚀
This website uses cookies to improve your experience. We'll assume you're ok with this. Know more.
Exchange Online

How to Get Send on Behalf Permissions in Exchange Online

The send on behalf permission in Exchange Online allows users to send emails on behalf of others. Team members, especially those supporting executives, often use this permission to manage communications. Thus, it's critical to closely monitor these permissions to protect against delegation misuse and potential data leaks. This guide will help you explore effective methods to get send on behalf permissions to ensure proper management of Exchange Online.

Using Exchange Admin Center

Microsoft 365 Permission Required
Global Admin or Exchange Admin.
  • Login to the Exchange admin center.
  • Select Recipients and click on Mailboxes.
  • Click a specific mailbox and navigate to the Delegation»Send on behalf»Edit.
  • Now you can see the users who have send on behalf delegation permission for the specified mailbox.
Using Exchange Admin Center

Using PowerShell

Microsoft 365 Permission Required
Global Admin or Exchange Admin.
  • Connect to Exchange Online PowerShell module.
  • Run the below cmdlet to get the send on behalf delegation users.
  • Windows PowerShell Windows PowerShell
     Get-Mailbox |?{$_.GrantSendOnBehalfTo -ne $null}|Select PrimarySmtpAddress,GrantSendOnBehalfTo,RecipientTypeDetails
Using PowerShell

Using PowerShell Script

Microsoft 365 Permission Required
Global Admin or Exchange Admin.
  • The above PowerShell cmdlet only lists user IDs instead of displaying user principal names for delegates who have send on behalf permissions.
  • To address this, we have created a simple PowerShell script that helps you retrieve and view send on behalf permissions more conveniently.
Using PowerShell Script
GetMailboxPermissionReport.ps1
  • The script exports a complete mailbox permission report. However, to retrieve only send on behalf permissions, use the -SendOnBehalf parameter as shown below.
  • ./GetMailboxPermissionReport.ps1 -SendOnBehalf

Monitor ‘Send on Behalf’ Permissions to Streamline Your Email Communication!

AdminDroid Exchange Online reporter simplifies the management of mailbox permissions, a vital component in protecting data security. With comprehensive reports on delegated access, admins can efficiently monitor permissions, including send on behalf, send as, and full access. This aids in detecting suspicious permission changes, mitigating the risk of unauthorized email activity.

Advanced Alerts for Mailbox Security

Set up AdminDroid real-time alerts for mailbox permission changes, mailbox non-owner access, etc., to keep your email security tight without constant manual checks.

Manage Guest Users with Delegated Access

Keep an eye on guest users with delegated access to prevent unauthorized access and protect sensitive data.

Export Mailbox Permission Reports to Manage Access

Export mailbox permission reports to manage access rights like send on behalf, full access, and send as, ensuring data security and compliance.

Explore Mailbox Permissions with Exclusive Dashboards

AdminDroid offers a dedicated Exchange Online dashboard for a panoramic view of send on behalf permissions and mailbox permissions across all mailbox types.

Discover Admins with Send on Behalf Permissions

Identify users with send on behalf permissions on admin mailboxes along with their UPN, mailbox type, etc., to revoke unwanted access.

Audit Emails Sent with Send on Behalf Permissions

Discover every email sent with send on behalf permissions in Microsoft 365 with details like sender address, sent time, etc., to ensure proper usage and prevent unauthorized access.

In summary, monitoring send on behalf delegation permissions is crucial for identifying who has control over which mailboxes. This helps to avoid excessive mailbox permissions to suspicious users, which could lead to data breaches or compromised security. Additionally, AdminDroid offers a wide range of reports for mailboxes, enhancing mailbox management.

Explore a full range of reporting options

Important Tips

Monitor Office 365 mailbox access to other mailboxes within your organization to protect data and comply with regulations like GDPR or HIPAA.

Check reports on email forwarding to external domains, non-owner mailbox access, & more to manage Exchange Online mailboxes and enhance mailbox security.

Regularly audit Exchange Online mailbox permission changes to prevent suspicious mailbox activities in your Microsoft 365.

Common Errors and Resolution Steps

The following are possible errors and troubleshooting hints for the Send on behalf mailbox permissions report.

Error You don’t have permission to send messages from this mailbox.

This error occurs when send on behalf or send as permissions are not properly configured. It's a common misconception that full access permissions grant complete access, but a user with this permission cannot send emails on another user's behalf.

Fix To assign send on behalf or send as permissions for a specific mailbox, you can use the PowerShell cmdlets below.
#Send on behalf permission 
 
Set-Mailbox -Identity "mailbox email address" -GrantSendOnBehalfTo "delegate UPN" 
 
#Send as permission 
 
Add-RecipientPermission -Identity "mailbox email address" -Trustee "delegate UPN" -AccessRights SendAs 

Error The operation couldn't be performed because the object couldn't be found on 'MA0P287A04DC003.INDP287A004.PROD.OUTLOOK.COM'

This error occurs because the specified user does not have the proper Exchange Online licenses.

Fix Assign the appropriate licenses for specific users by navigating to the Microsoft 365 admin center»Users»Active users. Choose the specific user and assign licenses under "Licenses and apps".

Error The term 'Set-Mailbox' is not recognized as the name of a cmdlet, function, script file, or operable program.

This error occurs when the Exchange Online PowerShell module is not loaded.

Fix Import the Exchange Online module using the following command.
Import-Module ExchangeOnlineManagement

Error Unexpected token in expression or statement.

This error occurs when user names aren't correctly specified when adding them to existing send on behalf permissions.

Fix List the users as comma-separated values within double quotes, as shown below.
Set-Mailbox –Identity "mailbox email address" -GrantSendOnBehalfTo @{Add="userId 1","userId 2"} 

Frequently Asked Questions

Manage Email Delegation with Send on Behalf Permissions in Exchange Online!

How to grant send on behalf permissions?

How to grant send on behalf permissions? +

In dynamic workplaces, send on behalf permissions in Microsoft 365 simplify communication between departments, boosting organizational workflow efficiency. Now, let's explore how to enable send on behalf permissions in Microsoft 365.

Assign Send on Behalf Permissions Using Microsoft 365 Admin Center

  • Login to the Microsoft 365 admin center.
  • Go to Users»Active users.
  • Select the user for whom you want to set permissions.
  • Navigate to the "Mail" tab and click on "Send on behalf of permissions" under Mailbox Permissions.
  • Click on "+Add permissions". Search and select the specific users you want to grant send on behalf permissions.
  • Click "Add" to save the configuration.
how-to-grant-send-on-behalf-permissions

Grant Send on Behalf Permission Using PowerShell

  • Connect to Exchange Online PowerShell module.
  • Execute the cmdlet below after including the valid mailbox email address and delegate UPN.
Set-Mailbox -Identity "mailbox email address" -GrantSendOnBehalfTo "delegate UPN"

What is the difference between send as and send on behalf permissions?

What is the difference between send as and send on behalf permissions? +

In Exchange Online, both send as and send on behalf permissions allow a user to send emails representing another user or shared mailbox. However, these permissions have distinct differences which are discussed below.

Send As Permission in Exchange Online

With send as permission, a delegate can send an email from an assigned mailbox. But, the recipient will see that the email was sent by the mailbox owner, with no indication of the delegate's participation.

Send on Behalf Permission in Exchange Online

With send on behalf permission, a user can send an email on behalf of another user. However, the "From" line in the message indicates that the message was sent by the delegate representing the mailbox owner.

With AdminDroid, managing send as and send on behalf permissions becomes effortless!

  • Check the Mailbox Permission Summary report to see all mailboxes and the specific access permissions granted to users, including full access, send as, and send on behalf rights.
  • Simply go to Reports»Exchange»Mailbox Permissions»Mailbox Permission Summary report.
mailbox-permission-summary-report-faq2

Pro Tip: But wait, there's more! AdminDroid adds depth to mailbox permissions, offering tailored reports for both send on behalf and send as permissions. Get every detail you need, all in one place, making Exchange Online mailbox management a walk in the park for admins!

How to add send on behalf permission to a distribution group?

How to add send on behalf permission to a distribution group? +

Assigning send on behalf permissions to a Microsoft 365 distribution group boosts collaboration, allowing selected members to send emails on behalf of the group. This helps streamline communications and make announcements to the entire organization or within a specific team.

To add send on behalf permissions to a distribution group in Microsoft 365, you can either use the Exchange admin center or PowerShell.

Allow Members to Send on Behalf of a Distribution Group Using Exchange Admin Center

  • Login to the Exchange admin center.
  • Navigate to Recipients»Groups»Distribution list.
  • Choose the distribution group you wish to modify.
  • Go to the Settings»Manage delegates»Edit manage delegates»Add a delegate.
  • Select a user and select ‘Send on behalf’ permissions under ‘Permission Type’ drop-down.
  • Finally, click the ‘Save changes’ button.
how-to-add-permission-to-distribution-group

Add Send on Behalf Permission to a Distribution Group Using PowerShell

  • Connect to Exchange Online PowerShell.
  • Run the ‘Set-DistributionGroup’ cmdlet by including the users' UPN to add a delegate to a distribution group.
Set-DistributionGroup -Identity "distribution group" -GrantSendOnBehalfTo "delegate UPN"

How to assign send on behalf permissions for multiple recipients?

How to assign send on behalf permissions for multiple recipients? +

Assigning the send on behalf permission to multiple mailboxes can be challenging, particularly when one delegate needs access to several accounts. To simplify this process, here's how you can assign delegate permission for multiple recipients at the same time:

  • Sign-in to the new Exchange admin center.
  • Go to Recipients»Mailboxes.
  • Select the recipients and click on "Mailbox delegation".
  • Search and select the delegate you want to add.
  • Click the "Select permission types" drop-down and choose the "Send on behalf" permission.
  • Finally, save the configuration by clicking "Save".
send-on-behalf-permission-for-multiple-recipients

Moreover, determining a delegate's mailbox access can be a time-consuming process. It often involves the manual review of each mailbox.

Quickly see who has 'Send on behalf' permissions and their associated mailboxes with AdminDroid!

  • You can use the Mailbox with Send on Behalf report with the "Grant Send on Behalf to - contains - Delegate name" filter to quickly identify the mailboxes and their delegates with send on behalf permissions.
send-on-behalf-delegation-filter

Here's a helpful tip: After setting your filters, save them as a custom view. This saves you from setting up the filters every time when you need them. You can also export the report into a CSV file if you ever need the information locally or in your inbox.

How to allow users to send on behalf of a shared mailbox?

How to allow users to send on behalf of a shared mailbox? +

A shared mailbox is a single email address that multiple people can access and use to send and receive emails. Configuring 'Send on behalf' permissions is essential for effective email management in such shared mailboxes.

For instance, granting this permission to HR team members in a shared mailbox allows them to collectively manage job applications, employee inquiries, and confidential documents. This centralized approach ensures prompt and consistent handling of all HR communications, maintaining privacy and order.

To allow users to send on behalf of a shared mailbox, follow the steps below.

  • Login to the Microsoft 365 admin center.
  • Navigate to Teams & groups»Shared mailboxes.
  • Select the specific shared mailbox to assign send on behalf permission.
  • Locate "Manage mailbox permissions" and select "Send on behalf permissions".
  • Click "+Add permissions".
  • Search and delegate the user for the shared mailbox.
  • Finally, select "Add" to save the configuration.
shared-mailbox-send-on-behalf-permissions

Easily manage send on behalf permissions for Exchange Online shared mailboxes with AdminDroid!

  • You can get detailed insights into send on behalf permissions for shared mailboxes through AdminDroid's "shared mailbox permission detail" report.
  • Utilize the "Access Rights equal to Send on Behalf" filter in the Mailbox Permission Detail report to effortlessly view all send on behalf permissions applied to shared mailboxes.
send-on-behalf-permission-for-shared-mailbox

Keeping an eye on send on behalf permissions for shared mailboxes is just the start! To truly secure your Exchange Online environment, it's essential to oversee all delegation permissions across your shared mailboxes.

  • Using Microsoft 365 Admin Center: You can view the list of shared mailboxes and manage their delegate permissions individually.
  • Using Exchange Online PowerShell: You need to use multiple cmdlets or a script to export a detailed shared mailbox permissions report to CSV.
  • AdminDroid Exchange Online Reporter: While the above methods scratch the surface, AdminDroid allows you to dive deep into delegation permissions and their details. It provides dedicated charts and crystal-clear reports, making Exchange Online permissions management effortless!
+

Kickstart Your Journey With
AdminDroid

Your Microsoft 365 Companion with Enormous Reporting Capabilities

Download Now
User Help Manuals Compliance Docs
x
Delivering Reports on Time
Want a desired Microsoft 365 reports every Monday morning? Ensure automated report distribution and timely delivery with AdminDroid's Scheduling to your email anytime you need.
Delivering Reports on Time
Schedule tailored reports to execute automatically at the time you set and deliver straight to the emails you choose. In addition, you can customize report columns and add inteligent filtering to the activities just from the previous day to suit your Microsoft 365 report requirements.
Set It, Schedule It, See Results- Your Reports, Your Way, On Your Time!
Time Saving
Automation
Customization
Intelligent Filtering
Give Just the Right Access to the Right People
Grant fine-tuned access to any Microsoft 365 user with AdminDroid’s Granular Delegation and meet your organization’s security and compliance requirements.
Give Just the Right Access to the Right People
Create custom roles loaded with just the right permissions and give access to admins or normal users within AdminDroid. The result? A streamlined Microsoft 365 management experience that aligns your organization's security protocols and saves your invaluable time and effort.
Align, Define, Simplify: AdminDroid's Granular Delegation
Smart Organizational Control
Effortless M365 Management
Simplified Access
Advanced Alerts at a Glance
Receive quick notifications for malicious Microsoft 365 activities. Engage with the AdminDroid’s real-time alert policies crafted to streamline your security investigations.
Advanced Alerts at a Glance
Stay informed of critical activities like suspicious emails and high-risk logins, bulk file sharing, etc. Through creating and validating ideal alert policies, AdminDroid provides a comprehensive approach to real-time monitoring and management of potential threats within your organization.
AdminDroid Keeps You Always Vigilant, Never Vulnerable!
Proactive Protection
Real-time Monitoring
Security Intelligence
Threat Detection
Merge the Required Data to One Place
Combine multiple required columns into one comprehensive report and prioritize the information that matters most to you with AdminDroid’s Advanced Column Customization.
Merge the Required Data to One Place
This column merging capability offers a flexible way to add different columns from various reports and collate all the essential data in one place. Want to revisit the customized report? Save it as a 'View’, and your unique report is ready whenever you need it.
Merge with Ease and Save as Views!
Custom Reporting
Unique View
Desired Columns
Easy Data Interpretation
Insightful Charts and Exclusive Dashboards
Get a quick and easy overview of your tenant's activity, identify potential problems, and take action to protect your data with AdminDroid’s Charts and Dashboards.
Insightful Charts and Exclusive Dashboards
With AdminDroid charts and dashboards, visualize your Microsoft 365 tenant in ways you've never thought possible. It's not just about viewing; it's about understanding, controlling, and transforming your Microsoft 365 environment.
Explore Your Microsoft 365 Tenant in a Whole New Way!
Executive overviews
Interactive insights
Decision-making
Data Visualization
Efficient Report Exporting for Microsoft 365
Downloading your reports in the right file format shouldn’t be a hassle with AdminDroid’s Report Export. Experience seamless report exporting in various formats that cater to your needs.
Efficient Report Exporting for Microsoft 365
Navigate through diverse options and export Microsoft 365 reports flawlessly in your desired file format. Tailor your reports precisely as you need them and save them directly to your computer.
Take Control, Customize and Deliver- Your Office 365 Data, Exported in Your Way!
Easy Export
Seamless Downloading
Data Control
Manage Microsoft 365

Get AdminDroid Office 365 Reporter Now!