hard20 pts · first answer countsidentity-securityworkload-identity

Invoice bot needs one mailbox

An invoice-processing app needs to read only the shared mailbox invoices@ in Exchange Online, and it runs without a user. Granting Mail.Read as an application permission would cover every mailbox. What is the right approach?

A.Grant Mail.Read and scope it to that mailbox with Exchange RBAC for ApplicationsB.Use the delegated Mail.Read permission with no signed-in userC.Grant Mail.Read and ask the vendor to promise to read only invoices@D.Give the app the Exchange Administrator role instead

Discussion 0

Join free to post in the discussion.

Invoice bot needs one mailbox

Discussion 0

Related questions