Explore How to Grant Full Access Permission in Exchange 2010/2013/2016

Mack JohnData Scientist
I am a Data Recovery Specialist working as a software developer.
Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.

Whenever a user wants to access other user's mailboxes, admin must have to grant permission to the user requesting for the permission. In this article, we will discuss different ways to assign permission in Exchange 2010/2013/2016.

Learn How To Grant Full Access Permission in Exchange 2010/2013/2016

There are different ways by which admin can assign permissions on Exchange mailboxes. With different versions of Exchange Server there are different procedures that admin can follow to assign full permission. By granting full access permission, user can access and manage others mailboxes, but have no permission to send emails from these mailboxes.


Granting Full Access Permission In Exchange 2010

In Exchange, 2010 admin can grant full access to the user by two different ways:

  1. By using Exchange Management Console
  2. By using PowerShell for granting full access  


Exchange Management Console


  1. Go to the console tree, then click Recipient Configuration
  2. Select the mailbox for which admin want to grant Full Access permission.
  3. In the action window, under the mailbox name, click Manage Full Access Permission.
  4. The Manage Full Access Permission Window will we displayed on the screen.
  5. Now click Add.
  6. Select the user to which you want to grant Full Access permission, and
  7. Then click OK.
  8. Click Manage.
  9. On the Completion, the Summary will show whether Full Access permission was successfully granted. The summary also shows the shell command used in granting the permission.
  10. Click Finish

Using Powershell Command For Granting Full Access

For granting full permission using PowerShell, one need to use PowerShell Commands (cmdlet)


Add-MailboxPermission "User1" -User "User2" -AccessRights FullAccess

In this “User2” mailbox access permission granted to “User1” or can use below mentioned command for


Add-MailboxPermission -identity "User1" -accessrights:fullaccess -user "User2"

it will give full access of User2 mailbox to User1 and (where -user and -identity are parameters).


Granting Full Access Permission In Exchange 2013

Exchange 2013 uses nearly same PowerShell command as Exchange 2010 for granting full access to the user. However, sometimes users face Auto Mapping issue while accessing the mailboxes.

After granting full access to the mailboxes, it will appear on user's Outlook that one mailbox starts mapping other mailbox, which causes performance issue while starting the Outlook.

In order to get rid of this problem one needs to add -AutoMapping:$false parameter to the Add-MailboxPermission command.

 Add-MailboxPermission -identity "User1" -accessrights:fullaccess -user "User2" -AutoMapping:$false


Granting Full Access Permission In Exchange 2016

Exchange 2016 use EAC (Exchange Admin Centre) or Exchange Management Shell for granting the permission to the user or a groups known as delegates. In Exchange, 2016 by granting permission to user or a group, one can open and send messages from the granted a mailboxes.

There are three different types of permissions in Exchange 2016:

  1. Full Access - This permission allows user to open the mailbox and access the content of mailbox.
  2. Send As - Permission allows delegates to send message from assigned mailbox and if delegate sends email from the mailbox, it will appear to have been sent by the mailbox owner. However, delegate cannot sign in to the assigned mailbox.
  3. Send on Behalf - In this type of permission delegate can send the email from assigned mailbox on the behalf of mailbox owner. It will be indicated on the message that the message has been sent by the delegate on the behalf of owner.

Use EAC for Granting Permission


  1. In EAC go to Recipients>Mailboxes.
  2. Select the mailbox from the list that admin wants to assign full access permission for
  3. click Mailbox Delegation on mailbox properties page.
  4. To assign permission click Add under Full Access, select the recipients that admin wants to add.
  5. Now click Save

EAC to Assigning a User Permission to Send Email from a Group


  1. In EAC go to Recipients>Groups
  2. From list of Groups, select the Group that you want to assign Send as or Send on Behalf permission.
  3. click Group Delegation on mailbox properties page.
  4. To assign permission click Add under Send as or Send on Behalf permission.
  5. Now click Save.

By using above-mentioned procedures, admin can grant mailbox access permission in Exchange 2010, 2013 and 2016. After assigning the permissions to the user's mailbox, other user and group can access the content of mailbox and can even send emails from granted mailboxes.


By following above mentioned steps you can easily grant full access permission in exchange version 2010, 2013 and 2016.

I hope that my effort will be helpful for you.

Note: - For Exchange server database file error you can try Exchange Recovery Software and fix all issues.


Mack JohnData Scientist
I am a Data Recovery Specialist working as a software developer.

Comments (0)

Have a question about something in this article? You can receive help directly from the article author. Sign up for a free trial to get started.