• Article
  • 3 minutes to read

If your organization uses a hybrid Exchange environment, you should use the on-premises Exchange admin center (EAC) to create and manage shared mailboxes. The Exchange admin center (EAC) is the single unified management console that allows for managing both your on-premises and Exchange Online organizations and allows you to connect and configure features for both organizations. For more information, see Hybrid management in Exchange hybrid deployments.

For information on limitations, automapping, and getting your users set up, see Create a shared mailbox.

You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "User mailboxes" entry in the Recipients Permissions topic.

  1. Go to Recipients > Shared > Add Add icon..

  2. Fill-in the required fields:

    • Display name

    • Email address

  3. To grant Full Access or Send As permissions, click Add Add icon., and then select the users you want to grant permissions to. You can use the CTRL key to select multiple users. Confused about which permission to use? See Which permissions should you use? later in this topic.

    Note

    The Full Access permission allows a user to open the mailbox as well as create and modify items in it. The Send As permission allows anyone other than the mailbox owner to send email from this shared mailbox. Both permissions are required for successful shared mailbox operation.

  4. Click Save to save your changes and create the shared mailbox.

Use the EAC to edit shared mailbox delegation

  1. Go to Recipients > Shared > Edit Edit icon..

  2. Click Mailbox delegation

  3. To grant or remove Full Access and Send As permissions, click Add Add icon. or Remove Remove icon and then select the users you want to grant permissions to.

    Note

    The Full Access permission allows a user to open the mailbox as well as create and modify items in it. The Send As permission allows anyone other than the mailbox owner to send email from this shared mailbox. Both permissions are required for successful shared mailbox operation.

  4. Click Save to save your changes.

This example creates the shared mailbox Sales Department and grants Full Access and Send on Behalf permissions for the security group MarketingSG. Users who are members of the security group will be granted the permissions to the mailbox.

            New-Mailbox -Shared -Name "Sales Department" -DisplayName "Sales Department" -Alias Sales | Set-Mailbox -GrantSendOnBehalfTo MarketingSG | Add-MailboxPermission -User MarketingSG -AccessRights FullAccess -InheritanceType All                      

For detailed syntax and parameter information, see New-Mailbox.

Which permissions should you use?

You can use the following permissions with a shared mailbox.

  • Full Access: The Full Access permission lets a user log into the shared mailbox and act as the owner of that mailbox. While logged in, the user can create calendar items; read, view, delete, and change email messages; create tasks and calendar contacts. However, a user with Full Access permission can't send email from the shared mailbox unless they also have Send As or Send on Behalf permission.

  • Send As: The Send As permission lets a user impersonate the shared mailbox when sending mail. For example, if Kweku logs into the shared mailbox Marketing Department and sends an email, it will look like the Marketing Department sent the email.

  • Send on Behalf: The Send on Behalf permission lets a user send email on behalf of the shared mailbox. For example, if John logs into the shared mailbox Reception Building 32 and sends an email, it look like the mail was sent by "John on behalf of Reception Building 32". You can't use the EAC to grant Send on Behalf permissions, you must use Set-Mailbox cmdlet with the GrantSendonBehalf parameter.

More information

For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.