activeSyncOrganizationSettings

Mobile Device Defaults. Tenant-wide default access level for new mobile devices. The activeSyncOrganizationSettings singleton lives under /exchange/v1.0/activeSyncOrganizationSettings in the Devices & mobile category.

Fact	Value
Path	/exchange/v1.0/activeSyncOrganizationSettings
Category	Devices & mobile
Tier	Tier 9, Hybrid and organization
Read role	OrganizationConfig.Read.All (Community)
Write role	none (read-only)
Backing cmdlets	Get-ActiveSyncOrganizationSettings, Set-ActiveSyncOrganizationSettings

Routes

Method	Path	Synopsis	Role	Plan
GET	/exchange/v1.0/activeSyncOrganizationSettings	List activeSyncOrganizationSettings entries.	OrganizationConfig.Read	Community

GET /exchange/v1.0/activeSyncOrganizationSettings

List activeSyncOrganizationSettings entries.

Backing cmdlet: Get-ActiveSyncOrganizationSettings. Role: OrganizationConfig.Read (Community).

Get the organization-wide ActiveSync mobile mailbox settings

Reads the tenant singleton that holds organization-wide Exchange ActiveSync (mobile mailbox) defaults, backed by the Get-ActiveSyncOrganizationSettings cmdlet. There is exactly one of these per tenant, so no key is needed.

GET /exchange/v1.0/activeSyncOrganizationSettings HTTP/1.1
Authorization: Bearer {token}

HTTP/1.1 200 OK

{
  "@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#activeSyncOrganizationSettings",
  "Id": "Mobile Mailbox Settings",
  "Name": "Mobile Mailbox Settings",
  "Identity": "Mobile Mailbox Settings",
  "Guid": "3f2a1c8d-7b94-4e2a-91d6-5c0e8a72f410",
  "DefaultAccessLevel": "Allow",
  "AdminMailRecipients": [],
  "UserMailInsert": "",
  "AllowAccessForDeviceIDs": [],
  "BlockAccessForDeviceIDs": [],
  "OtaNotificationMailInsert": false,
  "WhenCreated": "2026-03-30T17:01:54+03:00",
  "WhenChanged": "2026-03-30T17:02:03+03:00",
  "AdminDisplayName": "",
  "AllowAccessForUnSupportedPlatform": false,
  "AllowRMSSupportForUnenlightenedApps": false,
  "DeviceFiltering": null,
  "DistinguishedName": "CN=Mobile Mailbox Settings,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
  "EnableMobileMailboxPolicyWhenCAInplace": false,
  "ExchangeObjectId": "a7d4e190-2c63-48fb-9a51-6e0b7c3d9f82",
  "HasAzurePremiumSubscription": false,
  "IsIntuneManaged": false,
  "OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
  "OrganizationalUnitRoot": "contoso.onmicrosoft.com",
  "OtherWellKnownObjects": [],
  "TenantAdminPreference": "NoPreference",
  "WhenChangedUTC": "2026-03-30T14:02:03Z",
  "WhenCreatedUTC": "2026-03-30T14:01:54Z"
}

Notes: Singleton: GET the collection path with no key. DeviceFiltering is null when no device-filtering rule is configured for the organization.