How to restrict msgrapgh access to one mailbox only

Question

Hi,

I am writing a powershell script using Microsoft graph to get the count of unread emails from the mailbox. I have given the applications permissions for my script to retrieve the count of unread email from the mailbox.

As I have given mail.ReadAll application permission to my script, it can access all the users mailboxes in my organization, however I want to restrict microsoft graph to one specific mailbox only, so it can access the mailbox of that user, but can't access any other users mailbox.

How can I achieve this restriction using Microsoft graph with powershell script?

Any pointers or help is appreaciated.

Answer 1

Use Application access policies: https://practical365.com/application-access-policies-in-exchange-online/

Answer 2

Hi @Vasil Michev ,

Thank you for your reply.

I will go through the URL mentioned by you and try it.

Answer 3

Hi @Vasil Michev ,

I have one more query regarding Microsoft graph.

Can we use serviceaccount to retrieve the Microsoft O365 resources using Microsoft graph, instead of using any specific user's mailbox account ?

Could you please share if this is possible and how to achieve this?

Thank you.

Answer 4

@Vasil Michev One more query popped up in my mind.

"Mail.ReadAll" application permission, as the name suggests it reads mails from all the mailboxes in the tenant.

So it covers individual user mailboxes as well as shared mailbox, is this correct?

Please confirm

Thank you.