What is a delegate account?
A delegate account is an account that is granted permission to access another person's mailbox or resources.
Set mailbox delegation
Open the Exchange Management Shell.
1. Run the command
This command grants the delegate account `superman@example.com` full access to all UserMailbox accounts.
Get-Mailbox -ResultSize unlimited -Filter {(RecipientTypeDetails -eq 'UserMailbox')-and(Alias -ne 'superman@example.com')}|Add-MailboxPermission -User superman@example.com -AccessRights fullaccess -InheritanceType all -AutoMapping $falseThe command consists of two parts that run together:
Get-Mailbox: Filters mailboxes that meet the specified criteria.Add-MailboxPermission: Adds permissions to the filtered mailboxes.
Create one or more new accounts to use as delegate accounts, such as `superman@example.com`. Do not use the default admin account.
2. Verify the authorization
Method 1: Logon validation
To verify the authorization, log on to the delegate mailbox, for example, the `superman` Exchange mailbox. Then, attempt to open another user's mailbox. Search for an employee mailbox to which you were granted access. If you can open that mailbox, the authorization is successful.
When you search for a user, contacts from outside your Exchange organization may also appear. Be sure to select the correct account. Selecting the wrong account during testing increases troubleshooting time.
Method 2: Command line
The `{FullAccess}` permission indicates that the authorization was successful.
Verify a single account
Get-MailboxPermission -Identity "user@example.com" | Where-Object {$_.User -like "superman"} | Format-List -Property Identity, User, AccessRights, IsInherited, AutoMapping
Verify all accounts
Get-Mailbox -ResultSize Unlimited | Get-MailboxPermission -User superman@example.com | Format-List Identity, User, AccessRights, IsInherited, AutoMapping