Guide142.8K views2,672 votes0 replies3,363 following
Exchange Online Application Access Policies: Constraining Graph Application Permissions to Specific Mailboxes
Application permissions grant tenant-wide access by default. Exchange Online Application Access Policies let you scope Graph Mail.Read to a mail-enabled security group, enforcing least privilege for daemon services.
application-access-policyexchange-online
microsoft-365Tasadduq Burneyowner31.8K rep · 22 Nov 2025, 04:30 UTC