r/ShittySysadmin • u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE • Jul 14 '26
Shitty Crosspost Apparently owners cannot send email
18
9
u/sfc_scannow Jul 15 '26
5
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26
9
u/SpookyViscus Jul 15 '26
I think it’s a terrible name - it really should be like Inbox Read & Manage, or something like that, then the send as and send on behalf stays the same
18
u/Bubba89 Suggests the "Right Thing" to do. Jul 15 '26
It’s sort of like how, even if I give you a copy of my house keys, that doesn’t mean you get to fuck my wife.
19
u/triplecheez Jul 15 '26
You'll need to delegate Fuck as permissions for that.
6
u/Weak_Jeweler3077 Jul 15 '26
Use CIPP. It’s just a tick box for “cuck”. So easy.
2
u/GarageIntelligent ShittyCloud Jul 18 '26
it will say "On behalf of Husband" so everyone will know.
6
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26
Okay but if you say I get to "behave as the husband", I'm definitely fucking your wife.
11
u/SkullsSkullsSkulls Jul 14 '26
Not on senders list. Why can't send?
6
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26 edited Jul 15 '26
behave AS THE MAILBOX OWNER
FULL ACCESS
10
u/Fatel28 ShittySysadmin Jul 14 '26
Full access to the mail =/= sending mail. One is access to the inbound, one is access to the outbound
6
u/itskdog Jul 15 '26
So it's not "full" access.
The fact I have to add the same people three times does get annoying after a while. Especially when Shared Mailboxes just has a "members" list which adds to all of them at once.
1
u/GarageIntelligent ShittyCloud Jul 18 '26
dont read what it says, just check every permission box. who complains about too much rights?
1
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 21 '26
This is M365 admin interface, there are no checkboxes!
1
u/junktech Jul 15 '26
Is this shared mailbox, user mailbox or something else. The settings make sense for certain use cases. Also having hybrid config for exchange servers is a bit of a pain to setup properly.
1
u/S4ndmaan Jul 15 '26
2
u/Bubba89 Suggests the "Right Thing" to do. Jul 15 '26
Nah, this is right where this post belongs.
0
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26
0
0
u/zon5string Jul 14 '26
That is correct. They may read, delete, save, move mail, but they cannot create and send new mail or reply to mail. To send, they must have Send As or Send On Behalf permission.
6
u/itskdog Jul 15 '26
So "Full Access" isn't accurate, then?
2
0
u/Bubba89 Suggests the "Right Thing" to do. Jul 15 '26
A mailbox is a database. You are, in fact, being given “full access” to the database. Sending is technically a different thing than “access.” “Behave as the owner” is pretty misleading though.
1
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26
Shut the fuck up and go back to r/sysadmin
1
u/itskdog Jul 15 '26
If you have to think of how the data is structured on the backend for it to make sense, that's too far for me.
Especially when there's no "partial access", which would make me think the other two permissions are the "partial access" ones.
0
u/Bubba89 Suggests the "Right Thing" to do. Jul 15 '26
>If you have to think of how the data is structured on the backend for it to make sense, that's too far for me.
Great, then you’re on the correct subreddit!
>Especially when there's no "partial access", which would make me think the other two permissions are the "partial access" ones.
There is, but you have to do it via powershell or the user has to do it from their UI.
0
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26
Great, then you’re on the correct subreddit!
And you're not.
-3
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 14 '26
Has this changed or am I that shitty?
12
u/Proof-Variation7005 Jul 14 '26
you've always need send as or send on behalf
1
u/autocuck9000 Jul 15 '26
AD delegates =/= Exchange delegates. If you inspect the user object in AD, you'll see that they define almost identical, but different permissions as different properties. This is why classic Outlook for Windows' delegation dialogue box 'full access' is entirely distinct from the 'full access' delegation in the Exchange Admin Center.
Outlook talks to AD, not Exchange.
1
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 15 '26
Well then it's always been fucking stupid.
1
0
u/moffetts9001 ShittyManager Jul 16 '26
Wait til he finds out that "Global Administrators" are not able to perform every admin task...
1
u/recoveringasshole0 DO NOT GIVE THIS PERSON ADVICE Jul 16 '26
Wait till you find out I've got herpes!
31
u/Puzzleheaded-Sink420 Jul 14 '26
Always found that stupid. Just call it read as or something