---
title: Mailbox Sync - Permissions import
slug: mailbox-sync-permissions-import
createdAt: 2025-06-11T20:26:21.329Z
---

## Overview

This process manages the synchronization of mailbox permissions from a temporary import source into a primary permissions system. It ensures that user identities are correctly resolved, permissions are accurately updated, and obsolete or invalid entries are cleaned up.

## Process Steps

1. **Resolve User Identities:** Attempt to match user identifiers from the import source against a directory cache using a prioritized sequence of identity fields (e.g., domain name, UPN, display name).
2. **Handle Unknown Users:** Assign a placeholder identifier to entries with unresolved or invalid user formats (e.g., system-generated SIDs).
3. **Validation Check:** If any user identities remain unresolved after the matching process, halt further processing and return the list of unresolved users for manual review or automated resolution.
4. **Update Existing Permissions:** Apply updates to existing permission records where matches are found between the import data and the current system.
5. **Remove Permissions for Deleted Users:** Identify and deactivate permissions associated with users marked as deleted in the directory cache.
6. **Clean Up Missing Permissions:** Deactivate any existing permissions that are no longer present