check before: 2025-11-01
Product:
Exchange, Microsoft 365 Apps, Microsoft 365 suite, Stream
Platform:
Developer, Mac, Online, Web, Windows Desktop, World tenant
Status:
Rolling out
Change type:
New feature, User impact, Admin impact
Links:
Details:
Summary:
Microsoft Exchange Online will enable admins to assign the SMTP.SendAsApp role to applications via App RBAC, allowing group-based or scoped mailbox access. This replaces manual per-mailbox permissions, simplifying OAuth SMTP client onboarding. Rollout begins November 2025, with no end-user impact. Prepare by planning group-based access and updating documentation.
Details:
[Introduction]
We're simplifying how organizations grant applications permission to send email on behalf of mailboxes. Today, customers must manually assign permissions to each individual mailbox using PowerShell, which is time-consuming and inefficient. With this new capability, admins can assign the SMTP.SendAsApp role to an app through App Role-Based Access Control (RBAC), enabling group-based or scoped access to mailboxes. This simplifies onboarding for SMTP clients using OAuth and provides a scalable, secure, and modern approach to managing mailbox access.
This message is associated with Microsoft 365 Roadmap ID 498356.
[When this will happen:]
General Availability (Worldwide): We will begin rolling out early November 2025 and expect to complete by late November 2025.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2025-09-25
updated:
2025-09-25
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Change in Mailbox Permission Management
Transitioning to App RBAC for SMTP permissions may lead to temporary confusion or misconfiguration if not properly prepared, potentially resulting in unauthorized access or inability to send emails for certain applications.
- roles: Exchange Admin, IT Support Staff
- references: https://learn.microsoft.com/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=498356
Documentation and Training Gaps
Failure to update internal documentation and train staff on the new App RBAC process could lead to inefficiencies and errors in managing mailbox access, impacting the overall user experience.
- roles: Exchange Admin, Helpdesk Staff
- references: https://learn.microsoft.com/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=498356
Configutation Options**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 weeks ago ago
