Limit Application Permissions to Specific Mailboxes
Restrict Entra application permissions to specific Exchange Online mailboxes instead of granting tenant-wide access. Configure application access policies or RBAC for applications using Exchange Online PowerShell to limit Mail.Read and Mail.ReadWrite permissions. Reduce security risks from compromised applications by enforcing scoped mailbox access.
Exchange Online