Skip to content
exonaut

owaMailboxPolicies

Outlook Web Policies. Outlook on the web feature policies assigned to mailboxes. The owaMailboxPolicies entity set lives under /exchange/v1.0/owaMailboxPolicies in the Mailbox settings category.

Fact Value
Path /exchange/v1.0/owaMailboxPolicies
Category Mailbox settings
Tier Tier 9, Hybrid and organization
Read role OrganizationConfig.Read.All (Community)
Write role OrganizationConfig.ReadWrite.All (Enterprise)
Backing cmdlets Get-OwaMailboxPolicy, Set-OwaMailboxPolicy, New-OwaMailboxPolicy, Remove-OwaMailboxPolicy

Routes

Section titled “Routes”
Method Path Synopsis Role Plan
GET /exchange/v1.0/owaMailboxPolicies List owaMailboxPolicies entries. OrganizationConfig.Read Community
POST /exchange/v1.0/owaMailboxPolicies POST /owaMailboxPolicies - create a new OWA mailbox policy. Required: name. Optional switch: isDefault (sets the new policy as the tenant default). Returns 201 + Location. OrganizationConfig.ReadWrite Enterprise
GET /exchange/v1.0/owaMailboxPolicies/{key} Get a single owaMailboxPolicies entry by Identity. OrganizationConfig.Read Community
PATCH /exchange/v1.0/owaMailboxPolicies/{key} PATCH /owaMailboxPolicies/{key} - partial update (~130 feature toggles). Body keys map 1:1 to Set-OwaMailboxPolicy parameters. Returns 200 + post-Set policy. OrganizationConfig.ReadWrite Enterprise
DELETE /exchange/v1.0/owaMailboxPolicies/{key} DELETE /owaMailboxPolicies/{key} - remove a policy. Optional ?force=true bypasses tenant-side soft-delete safety checks. Returns 204. OrganizationConfig.ReadWrite Enterprise

GET /exchange/v1.0/owaMailboxPolicies

Section titled “GET /exchange/v1.0/owaMailboxPolicies”

List owaMailboxPolicies entries.

Backing cmdlet: Get-OwaMailboxPolicy. Role: OrganizationConfig.Read (Community).

List Outlook on the web mailbox policies

Section titled “List Outlook on the web mailbox policies”

Returns every Outlook on the web (OWA) mailbox policy in the tenant, each carrying its full set of feature toggles, attachment-handling rules, and blocked/allowed file and MIME type lists.

GET /exchange/v1.0/owaMailboxPolicies HTTP/1.1
Authorization: Bearer {token}
HTTP/1.1 200 OK


{
  "@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#owaMailboxPolicies",
  "value": [
    {
      "Id": "OwaMailboxPolicy-Default",
      "Name": "OwaMailboxPolicy-Default",
      "Identity": "OwaMailboxPolicy-Default",
      "Guid": "01fa6cb4-1bbb-4566-bd71-938bb855f035",
      "IsDefault": true,
      "ActiveSyncIntegrationEnabled": true,
      "AllAddressListsEnabled": true,
      "CalendarEnabled": true,
      "ChangePasswordEnabled": true,
      "ContactsEnabled": true,
      "DirectFileAccessOnPublicComputersEnabled": true,
      "DirectFileAccessOnPrivateComputersEnabled": true,
      "ForceSaveAttachmentFilteringEnabled": false,
      "GlobalAddressListEnabled": true,
      "InstantMessagingEnabled": true,
      "JournalEnabled": true,
      "NotesEnabled": true,
      "OrganizationEnabled": true,
      "PublicFoldersEnabled": true,
      "RecoverDeletedItemsEnabled": true,
      "RemindersAndNotificationsEnabled": true,
      "RulesEnabled": true,
      "SearchFoldersEnabled": true,
      "SignaturesEnabled": true,
      "SkipCreateUnifiedGroupCustomSharepointClassification": true,
      "SMimeEnabled": true,
      "TasksEnabled": true,
      "TextMessagingEnabled": true,
      "UMIntegrationEnabled": true,
      "UseGB18030": false,
      "UseISO885915": false,
      "WSSAccessOnPublicComputersEnabled": true,
      "WSSAccessOnPrivateComputersEnabled": true,
      "DefaultTheme": "",
      "BlockedFileTypes": [
        ".settingcontent-ms",
        ".printerexport",
        ".appcontent-ms",
        ".application",
        ".library-ms",
        ".search-ms",
        ".appref-ms",
        ".vsmacros",
        ".website",
        ".msh2xml",
        ".msh1xml",
        ".diagcab",
        ".webpnp",
        ".ps2xml",
        ".ps1xml",
        ".mshxml",
        ".gadget",
        ".theme",
        ".psdm1",
        ".mhtml",
        ".cdxml",
        ".xbap",
        ".vhdx",
        ".pyzw",
        ".pssc",
        ".psd1",
        ".psc2",
        ".psc1",
        ".msh2",
        ".msh1",
        ".jnlp",
        ".aspx",
        ".appx",
        ".xnk",
        ".xll",
        ".wsh",
        ".wsf",
        ".wsc",
        ".wsb",
        ".vsw",
        ".vhd",
        ".vbs",
        ".vbp",
        ".vbe",
        ".url",
        ".udl",
        ".tmp",
        ".shs",
        ".shb",
        ".sct",
        ".scr",
        ".scf",
        ".reg",
        ".pyz",
        ".pyw",
        ".pyo",
        ".pyc",
        ".pst",
        ".ps2",
        ".ps1",
        ".prg",
        ".prf",
        ".plg",
        ".pif",
        ".pcd",
        ".osd",
        ".ops",
        ".msu",
        ".mst",
        ".msp",
        ".msi",
        ".msh",
        ".msc",
        ".mht",
        ".mdz",
        ".mdw",
        ".mdt",
        ".mde",
        ".mdb",
        ".mda",
        ".mcf",
        ".maw",
        ".mav",
        ".mau",
        ".mat",
        ".mas",
        ".mar",
        ".maq",
        ".mam",
        ".mag",
        ".maf",
        ".mad",
        ".lnk",
        ".ksh",
        ".jse",
        ".jar",
        ".its",
        ".isp",
        ".iso",
        ".ins",
        ".inf",
        ".img",
        ".htc",
        ".hta",
        ".hpj",
        ".hlp",
        ".grp",
        ".fxp",
        ".exe",
        ".der",
        ".csh",
        ".crt",
        ".cpl",
        ".com",
        ".cnt",
        ".cmd",
        ".chm",
        ".cer",
        ".cab",
        ".bgi",
        ".bat",
        ".bas",
        ".asx",
        ".asp",
        ".app",
        ".apk",
        ".adp",
        ".ade",
        ".ws",
        ".vb",
        ".py",
        ".pl",
        ".js"
      ],
      "BlockedMimeTypes": [
        "application/x-javascript",
        "application/javascript",
        "application/msaccess",
        "x-internet-signup",
        "text/javascript",
        "application/prg",
        "application/hta",
        "text/scriplet"
      ],
      "WhenCreated": "2026-03-30T17:02:22+03:00",
      "WhenChanged": "2026-03-30T17:02:30+03:00",
      "AccountTransferEnabled": true,
      "ActionForUnknownFileAndMIMETypes": "Allow",
      "AdditionalAccountsEnabled": null,
      "AdditionalStorageProvidersAvailable": true,
      "AdminDisplayName": "",
      "AllowCopyContactsToDeviceAddressBook": true,
      "AllowOfflineOn": "AllComputers",
      "AllowedFileTypes": ".rpmsg .xlsx .xlsm .xlsb .vstx .vstm .vssx .vssm .vsdx .vsdm .tiff .pptx .pptm .ppsx .ppsm .docx .docm .zip .xls .wmv .wma .wav .vtx .vsx .vst .vss .vsd .vdx .txt .tif .rtf .pub .ppt .png .pdf .one .mp3 .jpg .gif .doc .csv .bmp .avi",
      "AllowedMimeTypes": "image/jpeg image/png image/gif image/bmp",
      "AllowedOrganizationAccountDomains": null,
      "AttachmentsOfflineEnabledWin": true,
      "BizBarEnabled": true,
      "BookingsMailboxCreationEnabled": true,
      "BookingsMailboxDomain": null,
      "BulkImportEMLEnabled": "Undefined",
      "ChangeSettingsAccountEnabled": null,
      "ClassicAttachmentsEnabled": true,
      "ConditionalAccessFeatures": [],
      "ConditionalAccessPolicy": "Off",
      "DefaultClientLanguage": 0,
      "DelegateAccessEnabled": true,
      "DisplayPhotosEnabled": true,
      "DistinguishedName": "CN=OwaMailboxPolicy-Default,CN=OWA Mailbox Policies,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
      "EmptyStateEnabled": true,
      "ExchangeObjectId": "f6e0c231-85b2-47b5-b6ba-49d9c50d7e91",
      "ExplicitLogonEnabled": true,
      "ExternalContentSettingsAllowed": null,
      "ExternalImageProxyEnabled": true,
      "ExternalSPMySiteHostURL": null,
      "FacebookEnabled": true,
      "FeedbackEnabled": true,
      "ForceSaveFileTypes": ".svgz .html .xml .swf .svg .spl .htm .dir .dcr",
      "ForceSaveMimeTypes": "Application/x-shockwave-flash Application/octet-stream Application/futuresplash Application/x-director application/xml image/svg+xml text/html text/xml",
      "ForceWacViewingFirstOnPrivateComputers": false,
      "ForceWacViewingFirstOnPublicComputers": false,
      "ForceWebReadyDocumentViewingFirstOnPrivateComputers": false,
      "ForceWebReadyDocumentViewingFirstOnPublicComputers": false,
      "FreCardsEnabled": true,
      "GroupCreationEnabled": true,
      "HideClassicOutlookToggleOut": null,
      "IRMEnabled": true,
      "InstantMessagingType": "Ocs",
      "InterestingCalendarsEnabled": true,
      "InternalSPMySiteHostURL": null,
      "ItemsToOtherAccountsEnabled": null,
      "JunkEmailEnabled": true,
      "LinkedInEnabled": true,
      "LocalEventsEnabled": false,
      "LogonAndErrorLanguage": 0,
      "MessagePreviewsDisabled": false,
      "MonthlyUpdatesEnabled": true,
      "NpsSurveysEnabled": true,
      "OWALightEnabled": true,
      "OfflineEnabledWeb": true,
      "OfflineEnabledWin": true,
      "OnSendAddinsEnabled": false,
      "OneDriveAttachmentsEnabled": true,
      "OneWinNativeOutlookEnabled": null,
      "OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
      "OrganizationalUnitRoot": "contoso.onmicrosoft.com",
      "OutboundCharset": "AutoDetect",
      "OutlookBetaToggleEnabled": true,
      "OutlookDataFile": "Allow",
      "OutlookNewslettersAccessLevel": "Undefined",
      "OutlookNewslettersReactions": "Undefined",
      "OutlookNewslettersShowMore": "Undefined",
      "PersonalAccountCalendarsEnabled": true,
      "PersonalAccountsEnabled": null,
      "PersonalBookingsDisabled": false,
      "PhoneticSupportEnabled": false,
      "PlacesEnabled": true,
      "PredictedActionsEnabled": false,
      "PremiumClientEnabled": true,
      "PrintWithoutDownloadEnabled": true,
      "ProjectMocaEnabled": false,
      "ReferenceAttachmentsEnabled": true,
      "ReportJunkEmailEnabled": true,
      "SMimeSuppressNameChecksEnabled": false,
      "SatisfactionEnabled": true,
      "SaveAttachmentsToCloudEnabled": true,
      "SetPhotoEnabled": true,
      "SetPhotoURL": "",
      "ShowOnlineArchiveEnabled": true,
      "SilverlightEnabled": true,
      "SpellCheckerEnabled": true,
      "TeamsnapCalendarsEnabled": true,
      "ThemeSelectionEnabled": true,
      "ThirdPartyFileProvidersEnabled": false,
      "UNCAccessOnPrivateComputersEnabled": true,
      "UNCAccessOnPublicComputersEnabled": true,
      "UserDiagnosticEnabled": false,
      "UserVoiceEnabled": true,
      "WacEditingEnabled": true,
      "WacExternalServicesEnabled": true,
      "WacOMEXEnabled": false,
      "WacViewingOnPrivateComputersEnabled": true,
      "WacViewingOnPublicComputersEnabled": true,
      "WeatherEnabled": true,
      "WebPartsFrameOptionsType": "SameOrigin",
      "WebReadyDocumentViewingForAllSupportedTypes": true,
      "WebReadyDocumentViewingOnPrivateComputersEnabled": true,
      "WebReadyDocumentViewingOnPublicComputersEnabled": true,
      "WebReadyDocumentViewingSupportedFileTypes": ".doc .dot .rtf .xls .ppt .pps .pdf .docx .xlsx .pptx",
      "WebReadyDocumentViewingSupportedMimeTypes": "application/msword application/vnd.ms-excel application/x-msexcel application/vnd.ms-powerpoint application/x-mspowerpoint application/pdf application/vnd.openxmlformats-officedocument.wordprocessingml.document application/vnd.openxmlformats-officedocument.spreadsheetml.sheet application/vnd.openxmlformats-officedocument.presentationml.presentation",
      "WebReadyFileTypes": ".xlsx .pptx .docx .xls .rtf .ppt .pps .pdf .dot .doc",
      "WebReadyMimeTypes": "application/vnd.openxmlformats-officedocument.presentationml.presentation application/vnd.openxmlformats-officedocument.wordprocessingml.document application/vnd.openxmlformats-officedocument.spreadsheetml.sheet application/vnd.ms-powerpoint application/x-mspowerpoint application/vnd.ms-excel application/x-msexcel application/msword application/pdf",
      "WhenChangedUTC": "2026-03-30T14:02:30Z",
      "WhenCreatedUTC": "2026-03-30T14:02:22Z"
    }
  ]
}

Related: GET /exchange/v1.0/owaMailboxPolicies/{key}

POST /exchange/v1.0/owaMailboxPolicies

Section titled “POST /exchange/v1.0/owaMailboxPolicies”

POST /owaMailboxPolicies - create a new OWA mailbox policy. Required: name. Optional switch: isDefault (sets the new policy as the tenant default). Returns 201 + Location.

Backing cmdlet: New-OwaMailboxPolicy. Role: OrganizationConfig.ReadWrite (Enterprise).

Parameter In Type Required Description
name body yes
isDefault body boolean (switch)
dryRun query bool (switch)

Create owa mailbox policy - duplicate (409)

Section titled “Create owa mailbox policy - duplicate (409)”

OWA mailbox policy create returns 409 when an object of that name already exists. Backed by New-OwaMailboxPolicy.

POST /exchange/v1.0/owaMailboxPolicies HTTP/1.1
Authorization: Bearer {token}
Content-Type: application/json


{
  "name": "exonaut-audit-owa"
}
HTTP/1.1 409 Conflict


{
  "error": {
    "code": "Conflict",
    "message": "Cmdlet 'New-OwaMailboxPolicy' failed: ||Active Directory operation failed on VI1PR01A17DC001.EURPR01A017.PROD.OUTLOOK.COM. The object 'CN=exonaut-audit-owa,CN=OWA Mailbox Policies,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM' already exists.",
    "target": null,
    "innerError": {
      "cmdlet": "New-OwaMailboxPolicy"
    }
  },
  "correlationId": "0HNLTJ0Q1D32H:00000001"
}

Create a owa mailbox policy

Section titled “Create a owa mailbox policy”

OWA mailbox policy create. Returns 201 + Location + the freshly-fetched object. Backed by New-OwaMailboxPolicy.

POST /exchange/v1.0/owaMailboxPolicies HTTP/1.1
Authorization: Bearer {token}
Content-Type: application/json


{
  "name": "exonaut-audit-owa"
}
HTTP/1.1 201 Created
Location: /exchange/v1.0/owaMailboxPolicies/exonaut-audit-owa


{
  "@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#owaMailboxPolicies/$entity",
  "Id": "exonaut-audit-owa",
  "Name": "exonaut-audit-owa",
  "Identity": "exonaut-audit-owa",
  "Guid": "2c3fa327-d6ad-4e63-a923-108e33a1741f",
  "IsDefault": false,
  "ActiveSyncIntegrationEnabled": true,
  "AllAddressListsEnabled": true,
  "CalendarEnabled": true,
  "ChangePasswordEnabled": true,
  "ContactsEnabled": true,
  "DirectFileAccessOnPublicComputersEnabled": true,
  "DirectFileAccessOnPrivateComputersEnabled": true,
  "ForceSaveAttachmentFilteringEnabled": false,
  "GlobalAddressListEnabled": true,
  "InstantMessagingEnabled": true,
  "JournalEnabled": true,
  "NotesEnabled": true,
  "OrganizationEnabled": true,
  "PublicFoldersEnabled": true,
  "RecoverDeletedItemsEnabled": true,
  "RemindersAndNotificationsEnabled": true,
  "RulesEnabled": true,
  "SearchFoldersEnabled": true,
  "SignaturesEnabled": true,
  "SkipCreateUnifiedGroupCustomSharepointClassification": true,
  "SMimeEnabled": true,
  "TasksEnabled": true,
  "TextMessagingEnabled": true,
  "UMIntegrationEnabled": true,
  "UseGB18030": false,
  "UseISO885915": false,
  "WSSAccessOnPublicComputersEnabled": true,
  "WSSAccessOnPrivateComputersEnabled": true,
  "DefaultTheme": "",
  "BlockedFileTypes": [
    ".settingcontent-ms",
    ".printerexport",
    ".appcontent-ms",
    ".application",
    ".library-ms",
    ".search-ms",
    ".appref-ms",
    ".vsmacros",
    ".website",
    ".msh2xml",
    ".msh1xml",
    ".diagcab",
    ".webpnp",
    ".ps2xml",
    ".ps1xml",
    ".mshxml",
    ".gadget",
    ".theme",
    ".psdm1",
    ".mhtml",
    ".cdxml",
    ".xbap",
    ".vhdx",
    ".pyzw",
    ".pssc",
    ".psd1",
    ".psc2",
    ".psc1",
    ".msh2",
    ".msh1",
    ".jnlp",
    ".aspx",
    ".appx",
    ".xnk",
    ".xll",
    ".wsh",
    ".wsf",
    ".wsc",
    ".wsb",
    ".vsw",
    ".vhd",
    ".vbs",
    ".vbp",
    ".vbe",
    ".url",
    ".udl",
    ".tmp",
    ".shs",
    ".shb",
    ".sct",
    ".scr",
    ".scf",
    ".reg",
    ".pyz",
    ".pyw",
    ".pyo",
    ".pyc",
    ".pst",
    ".ps2",
    ".ps1",
    ".prg",
    ".prf",
    ".plg",
    ".pif",
    ".pcd",
    ".osd",
    ".ops",
    ".msu",
    ".mst",
    ".msp",
    ".msi",
    ".msh",
    ".msc",
    ".mht",
    ".mdz",
    ".mdw",
    ".mdt",
    ".mde",
    ".mdb",
    ".mda",
    ".mcf",
    ".maw",
    ".mav",
    ".mau",
    ".mat",
    ".mas",
    ".mar",
    ".maq",
    ".mam",
    ".mag",
    ".maf",
    ".mad",
    ".lnk",
    ".ksh",
    ".jse",
    ".jar",
    ".its",
    ".isp",
    ".iso",
    ".ins",
    ".inf",
    ".img",
    ".htc",
    ".hta",
    ".hpj",
    ".hlp",
    ".grp",
    ".fxp",
    ".exe",
    ".der",
    ".csh",
    ".crt",
    ".cpl",
    ".com",
    ".cnt",
    ".cmd",
    ".chm",
    ".cer",
    ".cab",
    ".bgi",
    ".bat",
    ".bas",
    ".asx",
    ".asp",
    ".app",
    ".apk",
    ".adp",
    ".ade",
    ".ws",
    ".vb",
    ".py",
    ".pl",
    ".js"
  ],
  "BlockedMimeTypes": [
    "application/x-javascript",
    "application/javascript",
    "application/msaccess",
    "x-internet-signup",
    "text/javascript",
    "application/prg",
    "application/hta",
    "text/scriplet"
  ],
  "WhenCreated": "2026-05-29T18:45:19+03:00",
  "WhenChanged": "2026-05-29T18:45:19+03:00",
  "AccountTransferEnabled": true,
  "ActionForUnknownFileAndMIMETypes": "Allow",
  "AdditionalAccountsEnabled": null,
  "AdditionalStorageProvidersAvailable": true,
  "AdminDisplayName": "",
  "AllowCopyContactsToDeviceAddressBook": true,
  "AllowOfflineOn": "AllComputers",
  "AllowedFileTypes": ".rpmsg .xlsx .xlsm .xlsb .vstx .vstm .vssx .vssm .vsdx .vsdm .tiff .pptx .pptm .ppsx .ppsm .docx .docm .zip .xls .wmv .wma .wav .vtx .vsx .vst .vss .vsd .vdx .txt .tif .rtf .pub .ppt .png .pdf .one .mp3 .jpg .gif .doc .csv .bmp .avi",
  "AllowedMimeTypes": "image/jpeg image/png image/gif image/bmp",
  "AllowedOrganizationAccountDomains": null,
  "AttachmentsOfflineEnabledWin": true,
  "BizBarEnabled": true,
  "BookingsMailboxCreationEnabled": true,
  "BookingsMailboxDomain": null,
  "BulkImportEMLEnabled": "Undefined",
  "ChangeSettingsAccountEnabled": null,
  "ClassicAttachmentsEnabled": true,
  "ConditionalAccessFeatures": [],
  "ConditionalAccessPolicy": "Off",
  "DefaultClientLanguage": 0,
  "DelegateAccessEnabled": true,
  "DisplayPhotosEnabled": true,
  "DistinguishedName": "CN=exonaut-audit-owa,CN=OWA Mailbox Policies,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
  "EmptyStateEnabled": true,
  "ExchangeObjectId": "2c3fa327-d6ad-4e63-a923-108e33a1741f",
  "ExplicitLogonEnabled": true,
  "ExternalContentSettingsAllowed": null,
  "ExternalImageProxyEnabled": true,
  "ExternalSPMySiteHostURL": null,
  "FacebookEnabled": true,
  "FeedbackEnabled": true,
  "ForceSaveFileTypes": ".svgz .html .xml .swf .svg .spl .htm .dir .dcr",
  "ForceSaveMimeTypes": "Application/x-shockwave-flash Application/octet-stream Application/futuresplash Application/x-director application/xml image/svg+xml text/html text/xml",
  "ForceWacViewingFirstOnPrivateComputers": false,
  "ForceWacViewingFirstOnPublicComputers": false,
  "ForceWebReadyDocumentViewingFirstOnPrivateComputers": false,
  "ForceWebReadyDocumentViewingFirstOnPublicComputers": false,
  "FreCardsEnabled": true,
  "GroupCreationEnabled": true,
  "HideClassicOutlookToggleOut": null,
  "IRMEnabled": true,
  "InstantMessagingType": "None",
  "InterestingCalendarsEnabled": true,
  "InternalSPMySiteHostURL": null,
  "ItemsToOtherAccountsEnabled": null,
  "JunkEmailEnabled": true,
  "LinkedInEnabled": true,
  "LocalEventsEnabled": false,
  "LogonAndErrorLanguage": 0,
  "MessagePreviewsDisabled": false,
  "MonthlyUpdatesEnabled": true,
  "NpsSurveysEnabled": true,
  "OWALightEnabled": true,
  "OfflineEnabledWeb": true,
  "OfflineEnabledWin": true,
  "OnSendAddinsEnabled": false,
  "OneDriveAttachmentsEnabled": true,
  "OneWinNativeOutlookEnabled": null,
  "OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
  "OrganizationalUnitRoot": "contoso.onmicrosoft.com",
  "OutboundCharset": "AutoDetect",
  "OutlookBetaToggleEnabled": true,
  "OutlookDataFile": "Allow",
  "OutlookNewslettersAccessLevel": "Undefined",
  "OutlookNewslettersReactions": "Undefined",
  "OutlookNewslettersShowMore": "Undefined",
  "PersonalAccountCalendarsEnabled": true,
  "PersonalAccountsEnabled": null,
  "PersonalBookingsDisabled": false,
  "PhoneticSupportEnabled": false,
  "PlacesEnabled": true,
  "PredictedActionsEnabled": false,
  "PremiumClientEnabled": true,
  "PrintWithoutDownloadEnabled": true,
  "ProjectMocaEnabled": false,
  "ReferenceAttachmentsEnabled": true,
  "ReportJunkEmailEnabled": true,
  "SMimeSuppressNameChecksEnabled": false,
  "SatisfactionEnabled": true,
  "SaveAttachmentsToCloudEnabled": true,
  "SetPhotoEnabled": true,
  "SetPhotoURL": "",
  "ShowOnlineArchiveEnabled": true,
  "SilverlightEnabled": true,
  "SpellCheckerEnabled": true,
  "TeamsnapCalendarsEnabled": true,
  "ThemeSelectionEnabled": true,
  "ThirdPartyFileProvidersEnabled": false,
  "UNCAccessOnPrivateComputersEnabled": true,
  "UNCAccessOnPublicComputersEnabled": true,
  "UserDiagnosticEnabled": false,
  "UserVoiceEnabled": true,
  "WacEditingEnabled": true,
  "WacExternalServicesEnabled": true,
  "WacOMEXEnabled": false,
  "WacViewingOnPrivateComputersEnabled": true,
  "WacViewingOnPublicComputersEnabled": true,
  "WeatherEnabled": true,
  "WebPartsFrameOptionsType": "SameOrigin",
  "WebReadyDocumentViewingForAllSupportedTypes": true,
  "WebReadyDocumentViewingOnPrivateComputersEnabled": true,
  "WebReadyDocumentViewingOnPublicComputersEnabled": true,
  "WebReadyDocumentViewingSupportedFileTypes": ".doc .dot .rtf .xls .ppt .pps .pdf .docx .xlsx .pptx",
  "WebReadyDocumentViewingSupportedMimeTypes": "application/msword application/vnd.ms-excel application/x-msexcel application/vnd.ms-powerpoint application/x-mspowerpoint application/pdf application/vnd.openxmlformats-officedocument.wordprocessingml.document application/vnd.openxmlformats-officedocument.spreadsheetml.sheet application/vnd.openxmlformats-officedocument.presentationml.presentation",
  "WebReadyFileTypes": ".xlsx .pptx .docx .xls .rtf .ppt .pps .pdf .dot .doc",
  "WebReadyMimeTypes": "application/vnd.openxmlformats-officedocument.presentationml.presentation application/vnd.openxmlformats-officedocument.wordprocessingml.document application/vnd.openxmlformats-officedocument.spreadsheetml.sheet application/vnd.ms-powerpoint application/x-mspowerpoint application/vnd.ms-excel application/x-msexcel application/msword application/pdf",
  "WhenChangedUTC": "2026-05-29T15:45:19Z",
  "WhenCreatedUTC": "2026-05-29T15:45:19Z"
}

Related: GET /exchange/v1.0/owaMailboxPolicies, DELETE /exchange/v1.0/owaMailboxPolicies/{key}

GET /exchange/v1.0/owaMailboxPolicies/{key}

Section titled “GET /exchange/v1.0/owaMailboxPolicies/{key}”

Get a single owaMailboxPolicies entry by Identity.

Backing cmdlet: Get-OwaMailboxPolicy. Role: OrganizationConfig.Read (Community).

Get an OWA mailbox policy by name

Section titled “Get an OWA mailbox policy by name”

Retrieves a single Outlook on the web (OWA) mailbox policy by its Identity, returning its full set of feature toggles, attachment-handling rules, and file-type allow/block lists.

GET /exchange/v1.0/owaMailboxPolicies/{key} HTTP/1.1
Authorization: Bearer {token}
HTTP/1.1 200 OK


{
  "@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#owaMailboxPolicies/$entity",
  "Id": "OwaMailboxPolicy-Default",
  "Name": "OwaMailboxPolicy-Default",
  "Identity": "OwaMailboxPolicy-Default",
  "Guid": "01fa6cb4-1bbb-4566-bd71-938bb855f035",
  "IsDefault": true,
  "ActiveSyncIntegrationEnabled": true,
  "AllAddressListsEnabled": true,
  "CalendarEnabled": true,
  "ChangePasswordEnabled": true,
  "ContactsEnabled": true,
  "DirectFileAccessOnPublicComputersEnabled": true,
  "DirectFileAccessOnPrivateComputersEnabled": true,
  "ForceSaveAttachmentFilteringEnabled": false,
  "GlobalAddressListEnabled": true,
  "InstantMessagingEnabled": true,
  "JournalEnabled": true,
  "NotesEnabled": true,
  "OrganizationEnabled": true,
  "PublicFoldersEnabled": true,
  "RecoverDeletedItemsEnabled": true,
  "RemindersAndNotificationsEnabled": true,
  "RulesEnabled": true,
  "SearchFoldersEnabled": true,
  "SignaturesEnabled": true,
  "SkipCreateUnifiedGroupCustomSharepointClassification": true,
  "SMimeEnabled": true,
  "TasksEnabled": true,
  "TextMessagingEnabled": true,
  "UMIntegrationEnabled": true,
  "UseGB18030": false,
  "UseISO885915": false,
  "WSSAccessOnPublicComputersEnabled": true,
  "WSSAccessOnPrivateComputersEnabled": true,
  "DefaultTheme": "",
  "BlockedFileTypes": [
    ".settingcontent-ms",
    ".printerexport",
    ".appcontent-ms",
    ".application",
    ".library-ms",
    ".search-ms",
    ".appref-ms",
    ".vsmacros",
    ".website",
    ".msh2xml",
    ".msh1xml",
    ".diagcab",
    ".webpnp",
    ".ps2xml",
    ".ps1xml",
    ".mshxml",
    ".gadget",
    ".theme",
    ".psdm1",
    ".mhtml",
    ".cdxml",
    ".xbap",
    ".vhdx",
    ".pyzw",
    ".pssc",
    ".psd1",
    ".psc2",
    ".psc1",
    ".msh2",
    ".msh1",
    ".jnlp",
    ".aspx",
    ".appx",
    ".xnk",
    ".xll",
    ".wsh",
    ".wsf",
    ".wsc",
    ".wsb",
    ".vsw",
    ".vhd",
    ".vbs",
    ".vbp",
    ".vbe",
    ".url",
    ".udl",
    ".tmp",
    ".shs",
    ".shb",
    ".sct",
    ".scr",
    ".scf",
    ".reg",
    ".pyz",
    ".pyw",
    ".pyo",
    ".pyc",
    ".pst",
    ".ps2",
    ".ps1",
    ".prg",
    ".prf",
    ".plg",
    ".pif",
    ".pcd",
    ".osd",
    ".ops",
    ".msu",
    ".mst",
    ".msp",
    ".msi",
    ".msh",
    ".msc",
    ".mht",
    ".mdz",
    ".mdw",
    ".mdt",
    ".mde",
    ".mdb",
    ".mda",
    ".mcf",
    ".maw",
    ".mav",
    ".mau",
    ".mat",
    ".mas",
    ".mar",
    ".maq",
    ".mam",
    ".mag",
    ".maf",
    ".mad",
    ".lnk",
    ".ksh",
    ".jse",
    ".jar",
    ".its",
    ".isp",
    ".iso",
    ".ins",
    ".inf",
    ".img",
    ".htc",
    ".hta",
    ".hpj",
    ".hlp",
    ".grp",
    ".fxp",
    ".exe",
    ".der",
    ".csh",
    ".crt",
    ".cpl",
    ".com",
    ".cnt",
    ".cmd",
    ".chm",
    ".cer",
    ".cab",
    ".bgi",
    ".bat",
    ".bas",
    ".asx",
    ".asp",
    ".app",
    ".apk",
    ".adp",
    ".ade",
    ".ws",
    ".vb",
    ".py",
    ".pl",
    ".js"
  ],
  "BlockedMimeTypes": [
    "application/x-javascript",
    "application/javascript",
    "application/msaccess",
    "x-internet-signup",
    "text/javascript",
    "application/prg",
    "application/hta",
    "text/scriplet"
  ],
  "WhenCreated": "2026-03-30T17:02:22+03:00",
  "WhenChanged": "2026-03-30T17:02:30+03:00",
  "AccountTransferEnabled": true,
  "ActionForUnknownFileAndMIMETypes": "Allow",
  "AdditionalAccountsEnabled": null,
  "AdditionalStorageProvidersAvailable": true,
  "AdminDisplayName": "",
  "AllowCopyContactsToDeviceAddressBook": true,
  "AllowOfflineOn": "AllComputers",
  "AllowedFileTypes": ".rpmsg .xlsx .xlsm .xlsb .vstx .vstm .vssx .vssm .vsdx .vsdm .tiff .pptx .pptm .ppsx .ppsm .docx .docm .zip .xls .wmv .wma .wav .vtx .vsx .vst .vss .vsd .vdx .txt .tif .rtf .pub .ppt .png .pdf .one .mp3 .jpg .gif .doc .csv .bmp .avi",
  "AllowedMimeTypes": "image/jpeg image/png image/gif image/bmp",
  "AllowedOrganizationAccountDomains": null,
  "AttachmentsOfflineEnabledWin": true,
  "BizBarEnabled": true,
  "BookingsMailboxCreationEnabled": true,
  "BookingsMailboxDomain": null,
  "BulkImportEMLEnabled": "Undefined",
  "ChangeSettingsAccountEnabled": null,
  "ClassicAttachmentsEnabled": true,
  "ConditionalAccessFeatures": [],
  "ConditionalAccessPolicy": "Off",
  "DefaultClientLanguage": 0,
  "DelegateAccessEnabled": true,
  "DisplayPhotosEnabled": true,
  "DistinguishedName": "CN=OwaMailboxPolicy-Default,CN=OWA Mailbox Policies,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
  "EmptyStateEnabled": true,
  "ExchangeObjectId": "f6e0c231-85b2-47b5-b6ba-49d9c50d7e91",
  "ExplicitLogonEnabled": true,
  "ExternalContentSettingsAllowed": null,
  "ExternalImageProxyEnabled": true,
  "ExternalSPMySiteHostURL": null,
  "FacebookEnabled": true,
  "FeedbackEnabled": true,
  "ForceSaveFileTypes": ".svgz .html .xml .swf .svg .spl .htm .dir .dcr",
  "ForceSaveMimeTypes": "Application/x-shockwave-flash Application/octet-stream Application/futuresplash Application/x-director application/xml image/svg+xml text/html text/xml",
  "ForceWacViewingFirstOnPrivateComputers": false,
  "ForceWacViewingFirstOnPublicComputers": false,
  "ForceWebReadyDocumentViewingFirstOnPrivateComputers": false,
  "ForceWebReadyDocumentViewingFirstOnPublicComputers": false,
  "FreCardsEnabled": true,
  "GroupCreationEnabled": true,
  "HideClassicOutlookToggleOut": null,
  "IRMEnabled": true,
  "InstantMessagingType": "Ocs",
  "InterestingCalendarsEnabled": true,
  "InternalSPMySiteHostURL": null,
  "ItemsToOtherAccountsEnabled": null,
  "JunkEmailEnabled": true,
  "LinkedInEnabled": true,
  "LocalEventsEnabled": false,
  "LogonAndErrorLanguage": 0,
  "MessagePreviewsDisabled": false,
  "MonthlyUpdatesEnabled": true,
  "NpsSurveysEnabled": true,
  "OWALightEnabled": true,
  "OfflineEnabledWeb": true,
  "OfflineEnabledWin": true,
  "OnSendAddinsEnabled": false,
  "OneDriveAttachmentsEnabled": true,
  "OneWinNativeOutlookEnabled": null,
  "OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
  "OrganizationalUnitRoot": "contoso.onmicrosoft.com",
  "OutboundCharset": "AutoDetect",
  "OutlookBetaToggleEnabled": true,
  "OutlookDataFile": "Allow",
  "OutlookNewslettersAccessLevel": "Undefined",
  "OutlookNewslettersReactions": "Undefined",
  "OutlookNewslettersShowMore": "Undefined",
  "PersonalAccountCalendarsEnabled": true,
  "PersonalAccountsEnabled": null,
  "PersonalBookingsDisabled": false,
  "PhoneticSupportEnabled": false,
  "PlacesEnabled": true,
  "PredictedActionsEnabled": false,
  "PremiumClientEnabled": true,
  "PrintWithoutDownloadEnabled": true,
  "ProjectMocaEnabled": false,
  "ReferenceAttachmentsEnabled": true,
  "ReportJunkEmailEnabled": true,
  "SMimeSuppressNameChecksEnabled": false,
  "SatisfactionEnabled": true,
  "SaveAttachmentsToCloudEnabled": true,
  "SetPhotoEnabled": true,
  "SetPhotoURL": "",
  "ShowOnlineArchiveEnabled": true,
  "SilverlightEnabled": true,
  "SpellCheckerEnabled": true,
  "TeamsnapCalendarsEnabled": true,
  "ThemeSelectionEnabled": true,
  "ThirdPartyFileProvidersEnabled": false,
  "UNCAccessOnPrivateComputersEnabled": true,
  "UNCAccessOnPublicComputersEnabled": true,
  "UserDiagnosticEnabled": false,
  "UserVoiceEnabled": true,
  "WacEditingEnabled": true,
  "WacExternalServicesEnabled": true,
  "WacOMEXEnabled": false,
  "WacViewingOnPrivateComputersEnabled": true,
  "WacViewingOnPublicComputersEnabled": true,
  "WeatherEnabled": true,
  "WebPartsFrameOptionsType": "SameOrigin",
  "WebReadyDocumentViewingForAllSupportedTypes": true,
  "WebReadyDocumentViewingOnPrivateComputersEnabled": true,
  "WebReadyDocumentViewingOnPublicComputersEnabled": true,
  "WebReadyDocumentViewingSupportedFileTypes": ".doc .dot .rtf .xls .ppt .pps .pdf .docx .xlsx .pptx",
  "WebReadyDocumentViewingSupportedMimeTypes": "application/msword application/vnd.ms-excel application/x-msexcel application/vnd.ms-powerpoint application/x-mspowerpoint application/pdf application/vnd.openxmlformats-officedocument.wordprocessingml.document application/vnd.openxmlformats-officedocument.spreadsheetml.sheet application/vnd.openxmlformats-officedocument.presentationml.presentation",
  "WebReadyFileTypes": ".xlsx .pptx .docx .xls .rtf .ppt .pps .pdf .dot .doc",
  "WebReadyMimeTypes": "application/vnd.openxmlformats-officedocument.presentationml.presentation application/vnd.openxmlformats-officedocument.wordprocessingml.document application/vnd.openxmlformats-officedocument.spreadsheetml.sheet application/vnd.ms-powerpoint application/x-mspowerpoint application/vnd.ms-excel application/x-msexcel application/msword application/pdf",
  "WhenChangedUTC": "2026-03-30T14:02:30Z",
  "WhenCreatedUTC": "2026-03-30T14:02:22Z"
}

Related: GET /exchange/v1.0/owaMailboxPolicies

PATCH /exchange/v1.0/owaMailboxPolicies/{key}

Section titled “PATCH /exchange/v1.0/owaMailboxPolicies/{key}”

PATCH /owaMailboxPolicies/{key} - partial update (~130 feature toggles). Body keys map 1:1 to Set-OwaMailboxPolicy parameters. Returns 200 + post-Set policy.

Backing cmdlet: Set-OwaMailboxPolicy. Role: OrganizationConfig.ReadWrite (Enterprise).

Parameter In Type Required Description
accountTransferEnabled body
actionForUnknownFileAndMIMETypes body
activeSyncIntegrationEnabled body
additionalAccountsEnabled body
additionalStorageProvidersAvailable body
allAddressListsEnabled body
allowCopyContactsToDeviceAddressBook body
allowedFileTypes body
allowedMimeTypes body
allowedOrganizationAccountDomains body
allowOfflineOn body
attachmentsOfflineEnabledWin body
bizBarEnabled body
blockedFileTypes body
blockedMimeTypes body
bookingsMailboxCreationEnabled body
bookingsMailboxDomain body
calendarEnabled body
changePasswordEnabled body
changeSettingsAccountEnabled body
classicAttachmentsEnabled body
conditionalAccessPolicy body
contactsEnabled body
defaultClientLanguage body
defaultTheme body
delegateAccessEnabled body
directFileAccessOnPrivateComputersEnabled body
directFileAccessOnPublicComputersEnabled body
disableFacebook body boolean (switch)
displayPhotosEnabled body
emptyStateEnabled body
explicitLogonEnabled body
externalImageProxyEnabled body
externalSPMySiteHostURL body
feedbackEnabled body
forceSaveAttachmentFilteringEnabled body
forceSaveFileTypes body
forceSaveMimeTypes body
forceWacViewingFirstOnPrivateComputers body
forceWacViewingFirstOnPublicComputers body
freCardsEnabled body
globalAddressListEnabled body
groupCreationEnabled body
hideClassicOutlookToggleOut body
instantMessagingEnabled body
instantMessagingType body
interestingCalendarsEnabled body
internalSPMySiteHostURL body
irmEnabled body
isDefault body boolean (switch)
itemsToOtherAccountsEnabled body
journalEnabled body
linkedInEnabled body
localEventsEnabled body
logonAndErrorLanguage body
messagePreviewsDisabled body
monthlyUpdatesEnabled body
name body
notesEnabled body
npsSurveysEnabled body
offlineEnabledWeb body
offlineEnabledWin body
oneDriveAttachmentsEnabled body
oneWinNativeOutlookEnabled body
onSendAddinsEnabled body
organizationEnabled body
outboundCharset body
outlookBetaToggleEnabled body
outlookDataFile body
outlookNewslettersAccessLevel body
outlookNewslettersReactions body
outlookNewslettersShowMore body
owaLightEnabled body
personalAccountCalendarsEnabled body
personalAccountsEnabled body
phoneticSupportEnabled body
placesEnabled body
premiumClientEnabled body
printWithoutDownloadEnabled body
projectMocaEnabled body
publicFoldersEnabled body
recoverDeletedItemsEnabled body
referenceAttachmentsEnabled body
remindersAndNotificationsEnabled body
reportJunkEmailEnabled body
rulesEnabled body
satisfactionEnabled body
saveAttachmentsToCloudEnabled body
searchFoldersEnabled body
setPhotoEnabled body
setPhotoURL body
showOnlineArchiveEnabled body
signaturesEnabled body
silverlightEnabled body
skipCreateUnifiedGroupCustomSharepointClassification body
sMimeSuppressNameChecksEnabled body
spellCheckerEnabled body
tasksEnabled body
teamSnapCalendarsEnabled body
textMessagingEnabled body
themeSelectionEnabled body
umIntegrationEnabled body
useGB18030 body
useISO885915 body
userVoiceEnabled body
wacEditingEnabled body
wacExternalServicesEnabled body
wacOMEXEnabled body
wacViewingOnPrivateComputersEnabled body
wacViewingOnPublicComputersEnabled body
weatherEnabled body
webPartsFrameOptionsType body
wssAccessOnPrivateComputersEnabled body
wssAccessOnPublicComputersEnabled body
dryRun query bool (switch)

Update an OWA mailbox policy

Section titled “Update an OWA mailbox policy”

Partial update of an Outlook on the web mailbox policy via Set-OwaMailboxPolicy. Send only the feature-toggle keys you want to change; body keys map 1:1 to Set-OwaMailboxPolicy parameters.

PATCH /exchange/v1.0/owaMailboxPolicies/{key} HTTP/1.1
Authorization: Bearer {token}
Content-Type: application/json


{
  "calendarEnabled": true,
  "contactsEnabled": true,
  "rulesEnabled": false
}
HTTP/1.1 200 OK
Content-Type: application/json; odata.metadata=minimal


{
  "Id": "exonaut-sample-owaMailboxPolicies",
  "Identity": "exonaut-sample-owaMailboxPolicies",
  "Name": "exonaut-sample-owaMailboxPolicies",
  "IsDefault": false,
  "CalendarEnabled": true,
  "ContactsEnabled": true,
  "RulesEnabled": false
}

Notes: Doc-derived from Wiki + write-param allowlist; not live-captured. Body fields are Wiki-valid; values are illustrative.

Related: GET /exchange/v1.0/owaMailboxPolicies

DELETE /exchange/v1.0/owaMailboxPolicies/{key}

Section titled “DELETE /exchange/v1.0/owaMailboxPolicies/{key}”

DELETE /owaMailboxPolicies/{key} - remove a policy. Optional ?force=true bypasses tenant-side soft-delete safety checks. Returns 204.

Backing cmdlet: Remove-OwaMailboxPolicy. Role: OrganizationConfig.ReadWrite (Enterprise).

Parameter In Type Required Description
dryRun query bool (switch)
force query bool (switch) Bypass tenant-side safety checks (Remove-OwaMailboxPolicy -Force).

Delete a owa mailbox policy

Section titled “Delete a owa mailbox policy”

Removes the owa mailbox policy by Identity. Returns 204. Backed by Remove-OwaMailboxPolicy.

DELETE /exchange/v1.0/owaMailboxPolicies/{key} HTTP/1.1
Authorization: Bearer {token}
HTTP/1.1 204 No Content

Related: POST /exchange/v1.0/owaMailboxPolicies

?dryRun=true previews of any write stay on Community.