Outlook Mobile now allows users to create delegates for their mailbox in the app without going near administrators. Sounds good, but Outlook Mobile uses its own delegation model, meaning that its permissions don’t work with OWA or Outlook desktop. Using its own permissions might make Outlook Mobile users happy, but it’s a very strange approach to take when the access doesn’t work in the other clients.
Exchange Online makes it easy to assign delegated permissions for user and shared mailboxes. But permissions assigned to people might not be still necessary, so it’s good to do a periodic check. In this post, we describe a script to scan for permissions on Exchange Online user and shared mailboxes and highlight non-standard permissions in a report generated as a CSV file.