M365 Change Tracker

← All changes · feature

Launched

Microsoft 365: SMTP onboarding to App Role Based Access Control

Why it matters: In preview

What to do: Today, customers must manually assign permissions to each individual mailbox using PowerShell, which is time-consuming and inefficient.

We're simplifying how organizations grant applications permission to send email on behalf of mailboxes. Today, customers must manually assign permissions to each individual mailbox using PowerShell, which is time-consuming and inefficient. With this new capability, admins can assign the SMTP.SendAsApp role to an app through App Role-Based Access Control (RBAC), enabling group-based or scoped access to mailboxes. This eliminates the need for per-mailbox configuration and streamlines onboarding for SMTP clients using OAuth. It’s a scalable, secure, and modern approach to managing mailbox access for applications.

Target November CY2025Cloud WorldwidePlatform Desktop, Mac, WebSource updated 2025-12-19

Affected: Exchange, Microsoft 365

View at Microsoft →