> ## Documentation Index
> Fetch the complete documentation index at: https://university.triggr-app.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Remove Mailbox Delegation
> Removes one person's full access, send as or send on behalf rights to one or more mailboxes in your client's Exchange Online.
Remove Mailbox Delegation takes away someone's access to one or more mailboxes: full access to open them, or the right to send as or on behalf of them. Use it when someone no longer needs to work from a colleague's mailbox, for example when cover ends. It's the reverse of [Mailbox Delegation](/core/workflows/mailbox-delegation), which gives that access. It needs [Microsoft 365 connected](/core/get-started/connect-microsoft-365), with [Exchange access](/core/reference/microsoft-faq#exchange-online) for the client.
## What the form asks
| Field | |
| - | - |
| Mailboxes | Required, always on. One or more mailboxes the person has access to, picked from the client's users |
| Delegate | Required, always on. The person whose access is removed |
| Access level | Required, always on. Full access, Send as or Send on behalf |
| Reason / ticket reference | Optional by default. For your records and the approver; not sent to Microsoft |
## What it does
1. Creates a ticket in your PSA, if Ticketing is on.
2. Waits for approval, if Approval is Internal or External, or a conditional override matches.
3. Remove Mailbox Access: for each mailbox, in the client's Exchange Online:
* Full access removes the delegate's permission to open the mailbox.
* Send as removes their right to send mail that appears to come from the mailbox.
* Send on behalf takes them off the list of people who can send on the owner's behalf.
With Log actions to the ticket on, the ticket also gets a note when the run starts, after Remove Mailbox Access and when the run completes.
Each run removes one access level. To remove full access and Send as, run it once for each.
## Configure it
Go to **Config**, choose Mailboxes and click Remove Mailbox Delegation.
| Setting | Where | What it does |
| - | - | - |
| Availability | Header | Internal only, Public form only, Internal + public or Disabled. List on homepage needs a public form. Base config only |
| Mailboxes, Delegate, Access level | Form config | Always on: the automation needs them |
| Reason / ticket reference | Form config | Hidden, Optional or Required. Can differ per client |
| Add field, Add section | Form config | Your own questions. They're saved with the request and can go in ticket templates, but aren't sent to Microsoft. Add client section asks one client only |
| Approval | Approval | None runs on submit. Internal waits for a teammate or group; External waits for the client's approver, set on each client. Conditional overrides use a different approval when the answers match, for example when Access level is Full access |
| Ticketing | Ticketing | Create a PSA ticket for each run, with its type, priority, status, subject and body. Log actions to the ticket adds an internal or public note as each action completes |
| User directory filters | User directory filters | Which users the Mailboxes and Delegate pickers list: licensed, active, no guests, and not in the Entra roles you exclude. Exclude specific users at a client's scope |
Approval, Ticketing and User directory filters are set on Base config and apply to every client unless you override them for one. For how Base config and client overrides work, see [How configuration works](/core/get-started/configure-user-onboarding#settings-for-each-client).
## Troubleshooting
Check User directory filters. By default the pickers leave out unlicensed users, users whose sign-in is blocked and guests. To remove a leaver's access, override the filters for that client and untick **Active users only**. Shared mailboxes usually have no licence and blocked sign-in, so untick **Licensed users only** too, or use [Shared Mailbox Access](/core/workflows/shared-mailbox-access).
Outlook can take a while to pick up the change. Removing Full access doesn't remove Send as or Send on behalf; run the workflow again for each.
The client has no Exchange connection in Triggr yet. See [Exchange Online](/core/reference/microsoft-faq#exchange-online).
## Related
* [Workflow catalogue](/core/reference/workflow-catalogue)
* [Run a workflow](/core/use/run-a-workflow)
* [Executions](/core/use/executions)
* [Mailbox Delegation](/core/workflows/mailbox-delegation), to give someone this access
* [Shared Mailbox Access](/core/workflows/shared-mailbox-access), to add or remove someone on a shared mailbox
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.