Microsoft 365: SMTP onboarding to App Role Based Access Control

Originally posted by Microsoft Jul 11, 2025 Uncategorized 0 Comments

We’re simplifying how organizations grant applications permission to send email on behalf of mailboxes. Today, customers must manually assign permissions to each individual mailbox using PowerShell, which is time-consuming and inefficient. With this new capability, admins can assign the SMTP.SendAsApp role to an app through App Role-Based Access Control (RBAC), enabling group-based or scoped access to mailboxes. This eliminates the need for per-mailbox configuration and streamlines onboarding for SMTP clients using OAuth. It’s a scalable, secure, and modern approach to managing mailbox access for applications.

Product	Exchange
Release phase	Preview
Release date	October CY2025 Preview date: October CY2025
Platform	Web
Cloud Instance	Worldwide (Standard Multi-Tenant)
Created	2025-07-10
Roadmap ID	498356
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?id=498356