Question
You are implementing server-side synchronization for a company. The company uses Exchange Online with no permissions delegated. All users are assigned the Approve Email Addresses for Users or Queues privilege.
You set up the server profile and configure the mailboxes. You encounter an issue when you attempt to approve mailboxes for other users.
You need to identify who can approve the mailbox.
Who should you identify?
- A. All users
- B. Microsoft Power Platform Administrator
- C. Any system administrator
- D. User who owns the mailbox Correct
Explanation
With Exchange Online, approving another user's mailbox requires the System Administrator role together with the Microsoft 365 Global admin or Exchange admin role, or the Delegated Mailbox Approver role; the Approve Email Addresses for Users or Queues privilege alone is not enough, and a system administrator or Power Platform (service) administrator by itself cannot approve. In this scenario no such permissions are delegated, so the only person who can approve the mailbox is the user who owns it: a user can approve their own mailbox when their user principal name matches the mailbox email address, they have at least user-level Write on the Mailbox table, and they have the Approve Email Addresses privilege (or self-approval without the privilege is allowed).
