Granting Send As and Send on Behalf of permissions in Exchange Server/Microsoft 365 | Ranjan.info

In on-premises Exchange Server and Microsoft 365 (Exchange Online), you can allow users to send e-mail on behalf of another user or mailbox. In this article, we will show how to grant Send As And Send On Behalf permissions by using the Exchange Admin Center and PowerShell.

There are two types of permissions in Exchange for sending email on behalf of another mailbox or group:

• send as – Allow a user (delegate) to send emails as if they came directly from another mailbox or group. A recipient does not see that the message was sent by the delegate;
• send on behalf – Same permission as send-as, but a real sender is displayed in it From field of an email message. In the Outlook screenshot below, you can see that user XXX has sent the email on behalf of YYY.

How to give send as permission in exchange server?

In on-premises Exchange Server 2019, 2016, and 2013, you can grant mailbox permissions by using the Exchange Admin Center (EAC).

1. Sign in to ECP:
2. Go to Recipients -> Mailboxes -> Find the user mailbox you want to grant permission to;
3. Open mailbox properties and go to mailbox delegation tab;
4. You can donate here send Or send on behalf Permissions to another user by adding his account in the appropriate section.

If you assign both “Send as” and “Send on behalf” permissions to a user, Send As will be used by default.

Similarly, you can allow email to be sent on behalf of distribution groups or mail-enabled security groups (see group delegation tab).

You can set send as permission using PowerShell. To do this, open the Exchange Management Shell console or connect to your Exchange server remotely with PowerShell.

To assign SendAs permissions, run the command below:

Get-Mailbox [email protected] | Add-ADPermission -User [email protected] -ExtendedRights "Send As"

Permissions are assigned on user account objects in Active Directory. You can also set them manually in the Security tab of User Properties in the ADUC Console.

You can grant SendOnBehal permission:

Set-Mailbox -Identity [email protected] -GrantSendOnBehalfTo [email protected]

The previous command clears the current access list and adds only the new account to it. If you want to add a new user to the SendOnBehal access list, use this command:

Set-Mailbox secr[email protected] -GrantSendOnBehalfTo @{Add="[email protected]"}

You can assign SendOnBehal permissions to all mailboxes in a specific organizational unit in Active Directory:

Get-Mailbox | Where {$_.DistinguishedName -like "*OU=Service,OU=MUN,DC=woshub,DC=com*"} | Set-Mailbox -GrantSendOnBehalfTo @{add="User1","User2"}

If you want to grant permission to send on behalf of an Exchange distribution group:
Set-DistributionGroup -Identity mun_a[email protected] -GrantSendOnBehalfTo @{Add="[email protected]"}

To assign SendOnBehal permissions on a dynamic distribution group:

Set-DynamicDistributionGroup "IT_DeptUsers" -GrantSendOnBehalfTo @{Add="[email protected]"}

To send an e-mail on behalf of another mailbox in Outlook or OWA, add From Field for interface. When creating a new e-mail message, select the sender’s e-mail address in the From (or Select) field. other email address and find the owner from the global address list).

In an on-premises Exchange Server organization, you must wait two hours or restart the Exchange Information Store service for the changes to propagate.

If you receive the following error message when you try to send an e-mail message on behalf of another user:

You do not have permission to send to this recipient. For assistance, contact your system administrator.

Or

You can't send a message on behalf of this user unless you have permission to do so.

Try the following:

1. Send an email on behalf of an OWA mailbox;
2. If you were able to send e-mail messages from OWA, the Offline Address Book (OAB, C:\Users\%username%\AppData\Local\Microsoft\Outlook\Offline Address Books) when desktop Outlook is not running.

Add send on behalf permissions in Microsoft 365 (Exchange Online)

In Exchange Online, you can grant permission to send email on behalf of a mailbox or distribution group by using the Exchange Admin Center.

1. go to recipients and choose mailbox (Or groups,
2. Find the mailbox to which you want to assign permissions;
3. Open mailbox properties, go to Adjustment tab, and select Edit Manage delegates;
4. Then select the user you want to grant access to and the permission type (Send as or Send on behalf).

You can also delegate SendAs permissions in Exchange Online by using PowerShell. Connect to your Microsoft 365 tenant using the Exchange Online PowerShell (EXO) module:

Connect-ExchangeOnline -UserPrincipalName [email protected] -ShowProgress $true

To allow a user to send messages on behalf of a distribution group, use add-recipient permission Cmdlet:

Add-RecipientPermission <GroupName> -Trustee <MailboxName> -AccessRights SendAs

To delegate Send As permissions on a distribution group:

Get-DistributionGroup -Identity server_admins | Add-RecipientPermission -AccessRights SendAs -Trustee jsmith

To grant the SendOnBe half permission on a user mailbox, run this command:

Get-Mailbox max.joseph | Set-Mailbox -GrantSendOnBehalfTo HenriettaM

Allow sending on behalf of Microsoft 365 Groups:

Set-UnifiedGroup msteams_cc1234 -GrantSendOnBehalfTo max.joseph

List the users who have SendOnBehal permissions on the mailbox:

Get-Mailbox max.joseph | Where {$_.GrantSendOnBehalfTo -ne $null} | Select UserprincipalName,GrantSendOnBehalfTo

Display a list of users with SendAs permissions on a mailbox:

Get-RecipientPermission max.joseph

Find all mailboxes in the organization that have SendAs permissions set for a specified user:

Get-Recipient | Get-RecipientPermission -Trustee HenriM@woshub.onmicrosoft.com | Select Identity, Trustee, AccessRights

To remove SendAs permissions on a mailbox, use the Remove-RecipientPermission cmdlet:

Get-Recipient max.joseph | Remove-RecipientPermission -AccessRights SendAs –Trustee [email protected]