Microsoft 365 - Manage Full Mailbox, Send As, and Send on Behalf of Permissions

This document provides you with instructions on how to manage 'full mailbox', 'send as', and 'send on-behalf' permissions. These instructions can be used for managing permissions for user and service accounts.

Important: Permissions can only be assigned between UW-Madison Office 365 accounts; therefore, permissions cannot be assigned to accounts outside of UW-Madison Office 365 (e.g. Gmail, Outlook, Yahoo).

Important: If the account you are attempting to manage is a service account, please review the following article before proceeding - Microsoft 365 - Linking a service account to a NetID.

Review the following table to better understand the definitions of these permissions:

Full Mailbox	Send as	Send on-behalf	Result
X			Can create email drafts, Send calendar invites, create events, delete emails, read emails, but cannot send emails
	X		Can send emails - From address of sent message will appear to come from the owners mailbox
		X	Can send emails - From address of sent message will appear to come on behalf of the owners mailbox

Important: You can be assigned any combination of these permissions. If you are granted both 'send as' and 'send on-behalf' of permissions, 'send-as' permissions will be actioned.

For a complete definition of these permissions, see: Full Mailbox, Send as, and Send on-behalf of.

Note for administrators: In order to administer another NetID account in the Wisc Account Administration site, you must have administrative access over the account. To request administrative access over an account, follow these instructions. End users can also grant administrative access. Once administrative access has been granted, you can administer the account.

If you are requesting access to administer service or resource accounts, please follow steps outlined at Microsoft 365 - Request Group for Administrative Access.

Accessing and Understanding

Log in to the Wisc Account Administration site with your NetID credentials.
Select the account you want to manage. If you do not see the account you want to manage or are placed into your NetID account, review the following document: Wisc Account Administration site - Logging in.
Important: If the account you are attempting to manage is a service account, please review the following article before proceeding - Microsoft 365 - Linking a service account to a NetID.
Expand the Office 365 menu and select Permissions:
Within the permissions screen, you will have the ability to repair/remove/add permissions:

Existing Permissions: This table will show all users who have been granted full mailbox, send as, or send on-behalf of permissions. Important: you will also have the ability to repair existing permissions by using the "Permission Repair Tool" link.

Grant Permissions: Allows you to assign full mailbox, send as, or send on-behalf of permissions.

Important:
- "Send on Behalf" of permissions can only be granted to one person at a time. If you have granted User A this permission and you then grant User B this permission, then User A will no longer have this permission.
- "Send on Behalf" of permissions cannot be repaired. You must remove and add this permission.
- Permissions for linked accounts cannot be managed within this menu; Linked accounts will appear within this menu without the option to remove the permissions. You must use these instructions instead to manage linked accounts.

Add/Grant Permissions

Log in to the Wisc Account Administration site with your NetID credentials.
Select the account you want to manage. If you do not see the account you want to manage or are placed into your NetID account, review the following document: Wisc Account Administration site - Logging in.
Within the "Permissions" screen:
- Permissions For: enter the email address of the individual you want to add the permissions for. Must be an Office 365 email address.
- Permission: select the desired permission.
Click Add Permission button.
If successful, the following The following message will appear:
If unsuccessful, the following The following message will appear:

Important: This action may take up to 60 minutes to fully complete within Office 365 and may require the person who was granted these permissions to log out and log back into the client they are using. In addition, an automatically generated email will be delivered to you and the account you assigned these permissions.

Note: if the process is unsuccessful or an error occurs, please contact the DoIT Help Desk.

Removing Permissions

Log in to the Wisc Account Administration site with your NetID credentials.
Select the account you want to manage. If you do not see the account you want to manage or are placed into your NetID account, review the following document: Wisc Account Administration site - Logging in.
Within the "Permissions" screen, click Remove next to the account you want to remove the permissions from.
If successful, it may take up to 60 minutes to fully complete within Office 365. If the process is unsuccessful or an error occurs, please contact the DoIT Help Desk.

Confirming/Validating/Repairing Permissions

Log in to the Wisc Account Administration site with your NetID credentials.
Select the account you want to manage. If you do not see the account you want to manage or are placed into your NetID account, review the following document: Wisc Account Administration site - Logging in.
Within the "Permissions" screen, click Permission Repair Tool located under the permissions table.
Click the Validate Permissions button. Please be patient for this process to complete.
If no inconsistencies were found, there is nothing to do. If found, you will be presented with a listing of the issues:
If inconsistencies are found, click on the desired action: Reapply or Remove. Note: when this action is completed, the account will be removed from the list.

Authorized send as Addresses

To view the accounts you have permission to 'send as', please utilize the Send as Addresses tool.