Active Roles allows Non-Mail enabled Azure Security Groups in EXO Mailbox delegation. However the Azure Security group does not show when querying the EXO Mailbox delegation via Active Roles. But it does appear when checking the EXO Mailbox delegation natively.
Currently Non-Mail enabled Azure Security Groups cannot be added in EXO Mailbox delegation natively, however Microsoft does allow "Mail-enabled Security Group". See below article:
https://learn.microsoft.com/en-us/powershell/module/exchange/add-mailboxpermission?view=exchange-ps#-user
Status:
ARS should not allow Azure Non-mail-Enabled Security groups in EXO Mailbox Delegation. The Active Roles product team has raised Defect #489648 to remove this functionality.
Note that currently Active Roles does not support Azure Mail-Enabled Security Groups, the Active Roles product team has raised Enhancement #441515 to support this type of Azure objects and allow the use of Azure Mail-Enabled Security Groups in EXO Mailbox Delegation. See below KB article:
Workaround:
NA
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Termini di utilizzo Privacy Cookie Preference Center