Message CenterNew featureUser impactAdmin impact

MC1304287 — Microsoft Exchange Online: Upcoming secure-by-default changes for Exchange APIs

MC1304287Exchange OnlineplanForChangeUpdated: 8 May 2026

Starting June 2026, Microsoft will update the default user consent policy for Microsoft Graph to require admin consent for additional Exchange-related permissions. Users cannot grant consent for these unless apps are approved in the Mail client policy. Existing consents and custom policies remain unaffected.

Applies to: Exchange Online
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).