Gmail - Delegated Access/Shared Mailboxes

[Rundc]

We've only recently iplemented MFA on our google accounts, acheived utilising P1 licenses on Azure AD and syncing accounts for SSO.

 

Anyway this presented a problem where we have shared mailboxes/accounts in gmail where specific functions will have 2,3,4 users have the email address and password to the generic account, this accounts are currently exluded from MFA.

 

I haven't worked with google previoulsy and wondered what others do for shared mailboxes in gogole workspace?

 

I was looking at setting up delegated access meaning staff would be forced to use their own MFA to access these accounts, the generic accounts can then be secured with more complex passwords and hopefully MFA.

 

With delegated access can you delegate to a group email address and have all users as part of that group have access, can that group be maintained in AD and synced?

 

How do you deal with the need for shared mailboxes in google workspace?

[PrimaryNetMan]

So using our office mailbox as an example.

 

Created [email protected]

 

Secured with complex password and MFA via a usb security key

 

Signed in once

 

Using GAM delegated this mailbox to required users

 

gam user [email protected] delegate to 

 

Users then have to be signed in via their own account and can jump onto this mailbox via the account dropdown when in Gmail.

[k-strider]

as above we do the same create a user set a complex password and use GAM to deligate access to it via the google clound console

https://appsevents.com/blog/2020/11/g-suite-enterprise-management-installing-gam-in-google-cloud-shell.html

we dont even log in to the new user

[IKWeb]

Hi

 

When you use GAM does the end user still need to accept the Delegate response (the email Google kicks out) or is that done automatically?

 

At the moment I am doing the same thing as you - but on 1st sign in to the shared mailbox - I just delegate access manually to the email addresses needed.

 

TIA

[Rundc]

When you delegate access to a mailbox using GAM the user does need to to accept the delegation and does not receive a notification.

 

If you share the calendar the person you share the calendar to will receive a notification that the calendar has been shared with them