Exchange Online · Mail Flow
Remote and Accepted Domains
Manage remote domains, accepted domains, and connectors that define valid email domains and how external domains are treated.
Scope: Email domains and external domain handling
Permissions
- Add and remove accepted domains
- Configure domain types (Authoritative, Internal Relay, External Relay)
- Manage remote domain settings
- Configure message format for external domains
- Set default reply domain
Common use cases
- Adding new email domains to the organization
- Configuring subsidiary or additional domains
- Managing message format for partner domains
- Setting up domain-based mail routing
Best practices
- Verify domain ownership in Microsoft 365 admin center first
- Use Authoritative for domains where all recipients exist in Exchange Online
- Use Internal Relay for hybrid scenarios with on-premises recipients
- Configure remote domain settings for trusted partners
Security considerations
- Incorrect domain configuration can affect mail delivery
- Internal Relay domains can forward mail externally
- Remote domain settings affect auto-replies and message format
Common questions
When should I assign the Remote and Accepted Domains role?
Assign Remote and Accepted Domains when you need to: Adding new email domains to the organization; Configuring subsidiary or additional domains; Managing message format for partner domains; and Setting up domain-based mail routing. It is part of Exchange Online and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Remote and Accepted Domains role do?
The Remote and Accepted Domains role grants permissions including: Add and remove accepted domains; Configure domain types (Authoritative, Internal Relay, External Relay); Manage remote domain settings; Configure message format for external domains; and Set default reply domain. See the Permissions section above for the full list.
What are the security risks of the Remote and Accepted Domains role?
Key considerations when assigning Remote and Accepted Domains: Incorrect domain configuration can affect mail delivery; Internal Relay domains can forward mail externally; and Remote domain settings affect auto-replies and message format. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.