What is the purpose of the new "Read user and shared mail" delegated scope in Azure AD portal for Office 365 Exchange Online

1
votes

What is the purpose of the new delegated scope "Read user and shared mail" in Azure AD for Office 365 Exchange Online.

Is it for accessing shared mailbox with Outlook REST Api? It seemed impossible until now. Is there some documentation available? Is this scope requires admin_consent?

Read user and shared mail in delegated scope?

1
office365apioutlook-restapioffice365-restapiazure-active-directory

1 Answers

2
votes

Yes. This permission is used for accessing the messages from the shared mailbox. However we need to specify the shared mailbox we want to retrieve the messages from. Here is an example for your reference:

GET: https://outlook.office.com/api/v2.0/users/[email protected]/messages

Is there some documentation available? Is this scope requires admin_consent?

I didn't find the any document about this scope and based on the test this scope doesn't require admin consent.