Mailbox access

Access in MailMoose is granted per mailbox. Someone sees the mailboxes they have been given and nothing else, whatever their role in the organisation.

This means a colleague can run support@ without being able to read your personal address.

How access works

1. Whoever creates an address has access to it automatically.
2. Everyone else starts with no access to it.
3. An admin can grant access to any mailbox in the organisation, including to themselves.
4. Every grant is recorded, so there is always a record of who was given access to what.

Why admins do not see everything

Running an organisation and reading a colleague's mail are separate things. If admins had automatic access to every mailbox, promoting someone so they can add a domain would also hand them every private conversation in the business.

Admins can still reach any mailbox when they genuinely need to, for example when someone leaves and their address needs handing over. That action is deliberate and logged rather than silent.

Roles

Good practice

1. Use role addresses for shared work. support@ outlasts whoever is answering it this year.
2. Keep personal addresses personal. There is no reason for two people to share thomas@.
3. Review access when someone changes role or leaves.