{"id":1224,"date":"2012-02-28T17:38:00","date_gmt":"2012-02-28T17:38:00","guid":{"rendered":"http:\/\/www.tsls.co.uk\/?p=1224"},"modified":"2012-02-28T17:38:00","modified_gmt":"2012-02-28T17:38:00","slug":"cross-premises-permissions-exchange-online-hybrid","status":"publish","type":"post","link":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/","title":{"rendered":"Cross-premises permissions Exchange Online Hybrid"},"content":{"rendered":"<p>As per 3.8.1.2 Hybrid Deployment Considerations (detailed here: http:\/\/community.office365.com\/modg\/default.aspx)<\/p>\n<p>You should consider the following before implementing an Exchange hybrid deployment: <\/p>\n<p>\u00b7         Delegation coexistence. Delegate permissions (such as Delegate Access, folder permissions, and \u201cSend on behalf of\u201d) are migrated to Exchange Online but are not available after a mailbox move unless all parties are migrated at the same time. For example, if an executive in your organization is migrated to Exchange Online then his or her administrative assistant must be migrated at the same time in order to maintain delegate access.<br \/>\n\u00b7         Mailbox permissions. On-premises mailbox permissions such as Send As, Receive As and Full Access that are explicitly applied on the mailbox are migrated to Exchange Online. However, inherited (non-explicit) mailbox permissions and any permissions on non-mailbox objects\u2014such as distribution lists or a mail-enabled user\u2014are not migrated. Therefore, you will need to plan for configuring these permissions in Exchange Online if applicable for your organization. For example, you can use the Add-RecipientPermission and Add-MailboxPermission Windows PowerShell cmdlets to set the permissions in Office 365.<br \/>\n\u00b7         Cross-premises permissions. It is important to note that we do not support cross-premises permission scenarios. Permissions are only migrated and functional when implementing an Exchange hybrid deployment if there are corresponding directory objects in Exchange Online. Additionally, all objects with special permissions such as Send As, Receive As and Full Access must be migrated at the same time. This also means that to migrate these permissions you must ensure directory synchronization has completed before you start moving mailboxes.<br \/>\n\u00b7         Offboarding. As part of ongoing recipient management, you may have a need to move Exchange Online mailboxes back to your on-premises environment. For more information, see the Community Help topic Exchange Hybrid Deployment \u2013 Moving Cloud-Based Mailboxes to the On-Premises Organization.<br \/>\n\u00b7         Decommissioning on-premises Exchange. Some organizations may wish to completely remove their on-premises Exchange environment after all mailboxes are migrated. The steps to decommission on-premises Exchange should be planned carefully with the help of an Office 365 deployment specialist. Contact the Office 365 support team for more information.<br \/>\n\u00b7         Multi-forest Active Directory environments. If your organization implements multiple forests for logon or resource segmentation, Exchange hybrid deployment is not supported. <\/p>\n<p>However after internal testing the results are shown below:<\/p>\n<p>Migrate Mailbox to O365 &#8211; With Permissions defined before moving (user to user) the following behavour is seen<br \/>\n============================<\/p>\n<p>O365 &#8211; On-Prem:<br \/>\n* Open Mailboxes &#8211; WORKED<br \/>\n* Send AS or Behalf &#8211; FAILED<\/p>\n<p>On-Prem &#8211; O365:<br \/>\n* Open Mailboxes &#8211; WORKED<br \/>\n* Send As or Behalf &#8211; WORKED<\/p>\n<p>Adding permissions after mailbox has been moved<br \/>\n============================<\/p>\n<p>O365 &#8211; On-Prem:<br \/>\n* Not Possible to add permissions<\/p>\n<p>On-Prem &#8211; O365:<br \/>\n* Note Possible to add permissions<\/p>\n<p>O365 &#8211; O365:<br \/>\nWorks.<\/p>\n<p>So it would appear that if the permissions are set beforehand on the users mailbox, most of the permission features work (as noted above), but once migrated these can&#8217;t be altered until the On-Prem mailboxes have been moved<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As per 3.8.1.2 Hybrid Deployment Considerations (detailed here: http:\/\/community.office365.com\/modg\/default.aspx) You should consider the following before implementing an Exchange hybrid deployment: \u00b7 Delegation coexistence. Delegate permissions (such as Delegate Access, folder permissions, and \u201cSend on behalf<\/p>\n","protected":false},"author":11,"featured_media":1144,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[21],"tags":[741,761,1381],"class_list":["post-1224","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft","tag-exchange-2010","tag-exchange-online","tag-o365"],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.9.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\r\n<title>Cross-premises permissions Exchange Online Hybrid - TSLS - Luke Smith<\/title>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/\" \/>\r\n<meta property=\"og:locale\" content=\"en_GB\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"Cross-premises permissions Exchange Online Hybrid - TSLS - Luke Smith\" \/>\r\n<meta property=\"og:description\" content=\"As per 3.8.1.2 Hybrid Deployment Considerations (detailed here: http:\/\/community.office365.com\/modg\/default.aspx) You should consider the following before implementing an Exchange hybrid deployment: \u00b7 Delegation coexistence. Delegate permissions (such as Delegate Access, folder permissions, and \u201cSend on behalf\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/\" \/>\r\n<meta property=\"og:site_name\" content=\"TSLS - Luke Smith\" \/>\r\n<meta property=\"article:published_time\" content=\"2012-02-28T17:38:00+00:00\" \/>\r\n<meta property=\"og:image\" content=\"https:\/\/www.tsls.co.uk\/wp-content\/uploads\/2012\/01\/office365.png\" \/>\r\n\t<meta property=\"og:image:width\" content=\"179\" \/>\r\n\t<meta property=\"og:image:height\" content=\"59\" \/>\r\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\r\n<meta name=\"author\" content=\"Luke Smith\" \/>\r\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Luke Smith\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/\",\"url\":\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/\",\"name\":\"Cross-premises permissions Exchange Online Hybrid - TSLS - Luke Smith\",\"isPartOf\":{\"@id\":\"https:\/\/www.tsls.co.uk\/#website\"},\"datePublished\":\"2012-02-28T17:38:00+00:00\",\"dateModified\":\"2012-02-28T17:38:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.tsls.co.uk\/#\/schema\/person\/e4d7dac4fe1b3f8df31f3857bb3ebda7\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.tsls.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cross-premises permissions Exchange Online Hybrid\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.tsls.co.uk\/#website\",\"url\":\"https:\/\/www.tsls.co.uk\/\",\"name\":\"TSLS - Luke Smith\",\"description\":\"- Knowledge - Thoughts - Microsoft -\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.tsls.co.uk\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.tsls.co.uk\/#\/schema\/person\/e4d7dac4fe1b3f8df31f3857bb3ebda7\",\"name\":\"Luke Smith\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.tsls.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/29abc50f07a4ebe68cb4f31981884f89b2157d7e4ed63b09631d40c0717faa94?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/29abc50f07a4ebe68cb4f31981884f89b2157d7e4ed63b09631d40c0717faa94?s=96&d=mm&r=g\",\"caption\":\"Luke Smith\"},\"description\":\"I\u2019ve been working with Microsoft Technologies for over 20 years, my main focus now being Microsoft Online Services. I manage the Cloud Services at ElysianIT Limited and as a P-SELLER at Microsoft. I have worked with many organisations from SMC to Enterprise. I\u2019ve been working with Microsoft Technologies since DOS 5.0, to date I have been working on Microsoft\u2019s latest cloud technology Windows Azure, Windows 10 Office 365 and Microsoft SharePoint\",\"sameAs\":[\"http:\/\/www.tsls.co.uk\"],\"url\":\"https:\/\/www.tsls.co.uk\/index.php\/author\/luke\/\"}]}<\/script>\r\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cross-premises permissions Exchange Online Hybrid - TSLS - Luke Smith","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/","og_locale":"en_GB","og_type":"article","og_title":"Cross-premises permissions Exchange Online Hybrid - TSLS - Luke Smith","og_description":"As per 3.8.1.2 Hybrid Deployment Considerations (detailed here: http:\/\/community.office365.com\/modg\/default.aspx) You should consider the following before implementing an Exchange hybrid deployment: \u00b7 Delegation coexistence. Delegate permissions (such as Delegate Access, folder permissions, and \u201cSend on behalf","og_url":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/","og_site_name":"TSLS - Luke Smith","article_published_time":"2012-02-28T17:38:00+00:00","og_image":[{"width":179,"height":59,"url":"https:\/\/www.tsls.co.uk\/wp-content\/uploads\/2012\/01\/office365.png","type":"image\/png"}],"author":"Luke Smith","twitter_misc":{"Written by":"Luke Smith","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/","url":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/","name":"Cross-premises permissions Exchange Online Hybrid - TSLS - Luke Smith","isPartOf":{"@id":"https:\/\/www.tsls.co.uk\/#website"},"datePublished":"2012-02-28T17:38:00+00:00","dateModified":"2012-02-28T17:38:00+00:00","author":{"@id":"https:\/\/www.tsls.co.uk\/#\/schema\/person\/e4d7dac4fe1b3f8df31f3857bb3ebda7"},"breadcrumb":{"@id":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.tsls.co.uk\/index.php\/2012\/02\/28\/cross-premises-permissions-exchange-online-hybrid\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.tsls.co.uk\/"},{"@type":"ListItem","position":2,"name":"Cross-premises permissions Exchange Online Hybrid"}]},{"@type":"WebSite","@id":"https:\/\/www.tsls.co.uk\/#website","url":"https:\/\/www.tsls.co.uk\/","name":"TSLS - Luke Smith","description":"- Knowledge - Thoughts - Microsoft -","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tsls.co.uk\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.tsls.co.uk\/#\/schema\/person\/e4d7dac4fe1b3f8df31f3857bb3ebda7","name":"Luke Smith","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.tsls.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/29abc50f07a4ebe68cb4f31981884f89b2157d7e4ed63b09631d40c0717faa94?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/29abc50f07a4ebe68cb4f31981884f89b2157d7e4ed63b09631d40c0717faa94?s=96&d=mm&r=g","caption":"Luke Smith"},"description":"I\u2019ve been working with Microsoft Technologies for over 20 years, my main focus now being Microsoft Online Services. I manage the Cloud Services at ElysianIT Limited and as a P-SELLER at Microsoft. I have worked with many organisations from SMC to Enterprise. I\u2019ve been working with Microsoft Technologies since DOS 5.0, to date I have been working on Microsoft\u2019s latest cloud technology Windows Azure, Windows 10 Office 365 and Microsoft SharePoint","sameAs":["http:\/\/www.tsls.co.uk"],"url":"https:\/\/www.tsls.co.uk\/index.php\/author\/luke\/"}]}},"jetpack_featured_media_url":"https:\/\/www.tsls.co.uk\/wp-content\/uploads\/2012\/01\/office365.png","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2gf1k-jK","_links":{"self":[{"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=1224"}],"version-history":[{"count":0,"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1224\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/media\/1144"}],"wp:attachment":[{"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=1224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=1224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tsls.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=1224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}