Hi all,

Enviroment: Office 365 Enterprise E3 with Azure AD on cloud

Problem: I'm setting up a delegated connection to email account, and I face some permission problems on which i would like to know if it is solvable at all.

Lets say that I have a manager with email account and his secretary which have delegation to his email account with full control. The problem is, there are some emails which are confidential and even the secretary should not see them. I tried to solve this with RMS/IRM but this would be too much of administration. In this case I would need a template with permissions that would allow recipient to see email content, but disallow secretary to open and see the content.

So if I sum up, IRM template should allow viewing content only to recipient and no other and the recipient can be anyone in or out the company!

I don't have any more ideas for this issue. If you can suggest a suitable solution or point me to right direction I would really appreciate. 

thanks in advance and best regards

If the confidential messages can be identified and sorted through a rule, then you could create a rule to move those messages to a folder to which the delegate doesn't have rights.  The delegate couldn't have full mailbox rights as that means just what it says, "full"; the delegate would have to have rights conferred on folders for this to work.

Another idea is to create a second mailbox for the user, direct the confidential mail to that mailbox, and don't give the delegate rights to it.