Action required: Update permissions for Exchange Online Admin API
Microsoft is updating Exchange Online Admin API v2.0 permissions, replacing Exchange.ManageV2 and Exchange.ManageAsAppV2 with new permissions by November 2026. Affected applications must transition, obtain admin consent, verify RBAC roles, test, and remove old permissions to maintain access. No endpoint changes occur. What and Why: Microsoft is updating the authorization model for Exchange Online Admin API v2.0 by introducing dedicated API permissions. This change provides a clearer permission model for applications accessing Exchange Online administrative endpoints and supports the ongoing modernization of Exchange Online administration, including migration from Exchange Web Services (EWS). The Exchange Online Admin API v2.0 endpoints are not being retired. Only the permissions used to access them are changing: Exchange.ManageV2 is being replaced by Exchange.AdminAPI.Manage. Exchange.ManageAsAppV2 is being replaced by Exchange.AdminAPI.ManageAsApp. Applications using the affected permissions must transition to the corresponding new permissions to maintain uninterrupted access. Rollout Schedule: Worldwide: New permissions become available November 1, 2026. Complete migration by November 30, 2026. Existing permissions are deprecated December 1, 2026. GCC, GCC High, DoD: Rollout begins in November 2026, with existing permissions deprecated January 1, 2027. Impact on Your Organization: Who is affected: This change affects organizations that develop, own, or manage applications accessing Exchange Online Admin API v2.0 using Exchange.ManageV2 for delegated access or Exchange.ManageAsAppV2 for application-only access. If your organization does not use either permission, no action is required. Platforms/Services: Exchange Online Exchange Online Admin API v2.0 Microsoft Entra application permission and consent configuration What will happen: Applications must transition to Exchange.AdminAPI.Manage or Exchange.AdminAPI.ManageAsApp, as applicable. Administrators must grant consent to the new permissions where required. Existing Exchange Online RBAC requirements continue to apply. Exchange Online Admin API v2.0 endpoint URLs, API version, and supported operations are not changing as a result of this update. Applications relying exclusively on the retired permissions after the applicable deprecation date will no longer be able to access the APIs. Action Required/Recommendations: Identify affected applications. Review applications using Exchange.ManageV2 or Exchange.ManageAsAppV2. Configure the new permissions. Add the corresponding Exchange.AdminAPI.Manage or Exchange.AdminAPI.ManageAsApp permission. Grant administrator consent. Ensure the required new permissions are approved. Verify Exchange RBAC assignments. Confirm that the application […]
The post Action required: Update permissions for Exchange Online Admin API appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Action required: Update permissions for Exchange Online Admin API
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft 365: [Education] Microsoft Learning Zone – Improve Lesson Insights
See where your class is struggling and which students need support, with lesson-level results for every student. Aggregated responses show the...
Dynamics 365 Project Operations: Invoice usability enhancements
When billing teams review an invoice, they need to see where it stands, which transactions it includes, and what’s still waiting to be b...
Dynamics 365 Commerce: Unified Pricing Management – Require manager approval for price overrides and manual discounts that exceed margin limits
Retailers can protect their profitability without slowing down store operations. Sales associates can still adjust prices to close a sale. Any...
Dynamics 365 Finance: Faster cube data loading with optimized dataflows
The Matrix visual now provides clearer control over how zero and blank values are handled during planning. Users can explicitly save 0 as a pl...
Dynamics 365 Commerce: Unified Pricing Management – Attribute-based margin thresholds and tiers for approvals and reporting
Pricing managers can set margin controls that match how the business actually sells, instead of one threshold for everything. Each product, ch...
Microsoft SharePoint Online and OneDrive for the web: Updated search experience with Copilot Search
SharePoint Online and OneDrive on the web are updating to a unified Copilot Search experience with natural-language prompts, AI summaries, and...
Microsoft Teams: Automatically add tag members to channels with Workflows
Microsoft Teams will introduce a Workflows app template to automatically add users to channels when they are added to a team tag. This optiona...
Microsoft SharePoint: Data access governance report for group permissions
Microsoft SharePoint is introducing a Data access governance report in the admin center to help administrators identify sites accessible to sp...
Action required: Exchange Online Admin API MailboxFolderPermission response update
Microsoft will update the Exchange Online Admin API v2.0 MailboxFolderPermission endpoint to return the User property as a structured object w...
Microsoft Planner: Planner capabilities in Copilot Cowork through the Planner Plugin
The Planner Plugin integrates Microsoft Planner with Copilot Cowork, enabling task prioritization, completion assistance, plan creation, visua...