Microsoft 365: SMTP onboarding to App Role Based Access Control

Summary

We're simplifying how organizations grant applications permission to send email on behalf of mailboxes. Today, customers must manually assign permissions to each individual mailbox using PowerShell, which is time-consuming and inefficient. With this new capability, admins can assign the SMTP.SendAsApp role to an app through App Role-Based Access Control (RBAC), enabling group-based or scoped access to mailboxes. This eliminates the need for per-mailbox configuration and streamlines onboarding for SMTP clients using OAuth. It’s a scalable, secure, and modern approach to managing mailbox access for applications.

Status
Launched
General availability target
Nov 2025
Preview target
Oct 2025
Products
Exchange, Microsoft 365
Clouds
Worldwide (Standard Multi-Tenant)
Release phases
General Availability, Preview
Platforms
Desktop, Mac, Web
Added to the roadmap
10 Jul 2025
Last changed
19 Dec 2025 · 9mo ago
recently changed
ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft. Microsoft, Windows, Microsoft 365, Azure, and related names are trademarks of the Microsoft group of companies. Data comes from public sources listed on Sources; every item links to its original page. Dates and statuses can change after they are read. Built by Evotec. This is the public demo. It can also run on your own server, with your Microsoft 365 tenant and device data kept inside your network; Evotec can help you deploy and extend it.