SUPPORTED TENANTPILOT TASK · Fictional examples · Updated October 2026
What to check
- Full Access: allows a delegate to open and read the mailbox.
- Send As: allows sending as the mailbox address.
- Send on Behalf: identifies the delegate when sending.
- Membership and access reviews should also consider inherited rights, groups and other access routes.
Review mailbox access
- Confirm the mailbox and your authority to inspect access.
- List explicit Full Access permissions.
- Separately review Send As and Send on Behalf permissions.
- Compare results against the approved users and roles.
- Record any unexpected access and follow the normal change process to remove it.
PowerShell examples
Get-MailboxPermission -Identity "[email protected]"
Get-RecipientPermission -Identity "[email protected]"Filter or inspect the results carefully: system accounts and inherited entries may appear. A permissions list is a point-in-time check, not a comprehensive security assessment.
Where TenantPilot fits
TenantPilot includes tasks to show users with mailbox access and show mailboxes a user has access to. This is particularly useful when auditing an employee’s delegated permissions.
Further reading and official guidance
Microsoft services and interfaces can change. Check the linked official guidance before making changes in a live organisation.
Prefer guided Microsoft 365 administration?
TenantPilot provides guided tasks for suitable day-to-day administration on Windows, while complementing your existing IT support partner.
See TenantPilot in Microsoft Store ↗Always follow your organisation’s permissions, privacy and IT support procedures.