Mailbox Automapping

auto mapping determines whether outlook automatically adds an additional mailbox to a user’s profile when they are granted full access activate controls this behaviour through the mailbox rights applied to the mailbox and user this document explains how auto mapping works, how the disableautomapping right influences behaviour, and the current differences between on premises exchange and exchange online mailbox rights in activate activate represents mailbox permissions using the mailboxrights flags these describe all mailbox related access that may be applied to a user or group full – grants full access to the mailbox sendas – allows the user to send as the mailbox sendonbehalf – allows the user to send on behalf of the mailbox forward – configures the mailbox to forward messages disableautomapping – indicates that full access should be applied without auto mapping (supported on on premises exchange) because these are flags, they can be combined for example full + sendas full + disableautomapping full + sendas + sendonbehalf activate interprets these rights and applies the required mailbox acls, ad security entries and mailbox attributes auto mapping behaviour for on premises exchange auto mapping is an exchange capability outlook automatically displays a mailbox when exchange indicates that full access was granted with auto mapping enabled activate does not communicate with outlook it controls auto mapping indirectly by specifying how full access is granted to the mailbox in exchange full access with auto mapping enabled if mailboxrights includes full , and does not include disableautomapping full access is granted to the mailbox auto mapping remains enabled outlook automatically adds the mailbox to the user’s profile this is the standard behaviour for most shared mailbox scenarios full access with auto mapping disabled if mailboxrights includes both full , and disableautomapping then on supported on premises exchange resources full access is granted, but auto mapping is explicitly disabled users retain full access but must manually add the mailbox to outlook disableautomapping without full access if disableautomapping is applied without full, it has no effect this flag only modifies the way full access is granted disableautomapping is not a standalone right it modifies full access and is ignored unless full access is being applied other mailbox rights the following rights do not affect auto mapping sendas relies on ad security permissions sendonbehalf updates mailbox delegate attributes forward updates forwarding attributes on the mailbox these rights may be combined with full access with or without auto mapping, depending on the service or workflow requirement example scenarios (on premises exchange) mailbox should auto map use full (and optionally sendas or sendonbehalf) auto mapping is enabled and outlook adds the mailbox automatically mailbox should not auto map use full + disableautomapping users still have full access but must manually add the mailbox to outlook removing full access if full is removed from the rights set, activate removes the mailbox’s full access entry, which also removes auto mapping exchange online behaviour exchange online does not currently interpret disableautomapping in the same way as on premises exchange the exchange online resource in activate always grants full access using exchange online’s default behaviour current limitation full and full + disableautomapping both result in full access being applied exchange online’s default behaviour typically enables auto mapping as a result, selecting disableautomapping does not suppress auto mapping in exchange online today this is a known limitation of the current exchange online implementation and is on the activate roadmap to align behaviour with on premises exchange impact in customer environments on premises mailboxes behave as expected disableautomapping suppresses auto mapping exchange online mailboxes do not currently honour this flag customers who require full access without auto mapping in exchange online will not achieve this solely by configuring disableautomapping in activate at present summary auto mapping occurs when full access is granted with auto mapping enabled in exchange in on premises exchange, activate correctly distinguishes between full → auto mapping enabled full + disableautomapping → auto mapping disabled disableautomapping only applies when full access is granted sendas, sendonbehalf and forward are independent of auto mapping exchange online does not yet honour disableautomapping, but this alignment is planned