Microsoft 365: SMTP onboarding to App Role Based Access Control Beta
Data as of 2 hours ago (9 September 2026)
Description
We're simplifying how organizations grant applications permission to send email on behalf of mailboxes. Today, customers must manually assign permissions to each individual mailbox using PowerShell, which is time-consuming and inefficient. With this new capability, admins can assign the SMTP.SendAsApp role to an app through App Role-Based Access Control (RBAC), enabling group-based or scoped access to mailboxes. This eliminates the need for per-mailbox configuration and streamlines onboarding for SMTP clients using OAuth. It’s a scalable, secure, and modern approach to managing mailbox access for applications.
Change history
Added to the roadmap 10 July 2025. Tracked here since 1 September 2026. Earliest target we recorded: November 2025 (since tracked — Microsoft may have moved it before we started watching).
Nothing has changed on this item since tracking began on 1 September 2026. Changes appear here as Microsoft updates the feed.