---
title: "Synchronize user delegations with Microsoft"
description: "Automatic synchronization between Microsoft Exchange 'SendAs' and 'SendOnBehalfOf' settings"
url: https://support.signitic.com/en/articles/9561125-synchronize-user-delegations-with-microsoft
collection: "Get started with Microsoft 365"
updated: 2026-11-01
language: en
alternates: [fr, de, it, pt]
---

# Synchronize user delegations with Microsoft

Automatic synchronization between Microsoft Exchange 'SendAs' and 'SendOnBehalfOf' settings

Companies often use shared mailboxes such as `sales@company.com`, `support@company.com` or `contact@company.com`. In Microsoft 365, users can be authorized to send messages from these mailboxes. Until now, keeping the same access up to date in Signitic could require manual operations.

Automatic delegation synchronization allows Signitic to stay synchronized with Microsoft 365. Users have the appropriate information and signatures for shared mailboxes, while Microsoft 365 remains the source of truth for delegation rights.

![](https://staticfiles.gleap.io/ghelparticle/aoWhIP971wqt7LvCNLQi9oeJ5xoBKbNQtKYTJ9WVFhVeRjwaTiTO63Jn1W3NQPYm4E9TEd9NyUB.png)

## What are the benefits?

Automatic synchronization helps administrators to:

-   reduce manual configuration in Signitic;
    
-   keep access consistent with rights configured in Microsoft 365;
    
-   avoid oversights when a delegation is granted or revoked;
    
-   more easily manage a large number of shared mailboxes.
    

## What does Signitic synchronize?

Signitic imports the following Microsoft 365 delegation types for shared mailboxes:

-   **Send As** (`SendAs`) : the recipient sees that the message comes directly from the shared mailbox.
    
-   **Send on Behalf** (`SendOnBehalfOf`) : the recipient sees that the user sent the message on behalf of the shared mailbox.
    

Other mailbox permissions, such as **Full Access**, are not affected by this synchronization.

## How are additions and deletions synchronized?

Synchronization follows the lifecycle of delegations in Microsoft 365.

### When a delegation is added

1.  An administrator grants a user the **Send As** or **Send on Behalf** permission for a shared mailbox in Microsoft 365.
    
2.  The next successful import of Microsoft users retrieves this delegation.
    
3.  Signitic gives the user access to the corresponding information and signatures of the shared mailbox.
    
    ![](https://staticfiles.gleap.io/ghelparticle/OGdDWmUhkauBqwypbLekPDHGtfoeo2sFOIo6FlZJLMT0mUyjhpCzmEHQ1c76fVEH9Szdq7091wH.png)
    

### When a delegation is removed

1.  An administrator revokes the permission in Microsoft 365.
    
2.  The next successful import of Microsoft users detects that the delegation no longer exists.
    
3.  Signitic removes the corresponding delegation managed by the connector.
    

This is a one-way synchronization from Microsoft 365 to Signitic: both additions and deletions are replicated in Signitic, but Signitic never creates, modifies, or deletes delegation rights in Microsoft 365.

## What happens to delegations created manually in Signitic?

A manual delegation in Signitic is preserved if it does not exist in Microsoft 365.

If this same delegation is subsequently returned by Microsoft 365, it becomes managed by the connector. From that point on, future synchronizations can update or delete it to align it with Microsoft 365.

## How often is information updated?

Delegations are updated after each successful import of Microsoft users. Changes made in Microsoft 365 therefore appear in Signitic during the next successful synchronization: they are not applied immediately after the Microsoft setting is changed.

## Enable or disable the feature

This feature is available only for Microsoft 365 connectors. To enable it, grant the required permissions and validate the connection, follow the article "Configure the connection for Microsoft delegation synchronization"

Once validation is successful, delegation synchronization is enabled.

Disabling this feature stops future automatic updates. Existing rights in Microsoft 365 are not modified. A new Microsoft connection is required to reactivate synchronization.

> **Warning:** Disabling synchronization does not revoke access already granted in Signitic. Imported delegations are retained and become manual: you can then edit or delete them in Signitic. To remove access, review and delete the relevant delegation. Permissions in Microsoft 365 remain unchanged.

To discover the complete permissions configuration, see **Configure Microsoft 365 delegation synchronization for Signitic**.

## Frequently asked questions

### Why does a user not see an expected shared mailbox in Signitic?

Verify that the user has the **Send As** or **Send on Behalf** permission for the shared mailbox in Microsoft 365, then restart the Microsoft user synchronization.

### Does Signitic modify permissions in Microsoft 365?

No. Microsoft 365 remains the source of truth. Signitic only reads the supported delegation rights and uses them to provide the appropriate information and signatures.

### Will Signitic delete a manually created delegation?

No, unless that same delegation was also imported from Microsoft 365. Once Microsoft 365 provides this delegation, it becomes managed by the connector and can be deleted from Signitic if the Microsoft permission is subsequently revoked.

### What happens if permission validation fails?

See the "Troubleshooting" section of the article "Configure the connection for Microsoft delegation synchronization"