automapping for security group

Fugazi 21

Hi,

As it said on Shared mailboxes in Exchange Online page "Users who are members of the security group will be granted the permissions to the mailbox".
Ok, but automapping doesn't work for security group, so it's partially useless.

Do you know a clean PS script that allows to add and remove members of a security group in delegated users? (or any other technique to have automapping on a security group)

Thanks.

Joyce Shen - MSFT 16,706 Reputation points

2022-06-30T09:32:28.253+00:00

Hi @AGEP-7731

Do suggestions below help, and do you have any other concern about this question?

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer accepted by question author

Andy David - MVP 160.3K MVP Volunteer Moderator

Currently not possible since automapping leverages auto discovery. The auto discovery piece would need the ability to expand the group ( and expand it each time it ran) and thats not part of the specification.

You can always request as a feature however

https://feedbackportal.microsoft.com/feedback/forum/89a8afa3-2e1c-ec11-b6e7-0022481f8472

0 comments

5 additional answers

Dion Pennings | MDEX 0 Reputation points

2026-08-24T08:54:20.6466667+00:00

We ended up solving this by keeping the AD/security group as the source of truth and reconciling its members into explicit Exchange permissions per user, so AutoMapping can still work.

That also means removals are handled: when someone leaves the group, their Exchange delegation is removed during reconciliation.

Full disclosure: this problem eventually became a commercial tool I built called Tenvero.
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

automapping for security group

5 additional answers

Your answer