Outlook delegate access: letting an assistant manage email and calendars properly

When delegation makes sense

Delegation suits a business owner who receives a hundred emails a day and relies on an office manager to sort them, a practice principal whose appointments are booked by reception, or a director who travels and needs someone to accept meeting invitations. In every case, the assistant acts for one specific person rather than for a team address. If several people share the work for a general inbox, a shared mailbox is the better tool.

The alternative many small offices use is giving the assistant the manager's password. That breaks multi-factor sign-in, leaves no record of who did what, and means every security review flags the account. Delegate access solves the same need without any of that, and it can be removed in seconds when roles change.

A short written note of what the assistant is allowed to do also helps. It might say they manage the calendar, triage the inbox and reply to routine scheduling requests, but never approve payments or reply to legal matters. That clarity protects both people and makes it obvious later which permissions are still needed.

Setting up delegate permissions

In classic Outlook for Windows, the manager opens Account Settings and chooses Delegate Access, then adds the assistant and picks a permission level for Calendar, Tasks, Inbox, Contacts and Notes. New Outlook and Outlook on the web handle this from the calendar and mailbox sharing settings. An administrator can also grant mailbox permissions centrally, which is useful when the manager is away or not comfortable doing it.

Permission levels run from Reviewer, which can read only, through Author, which can create items, to Editor, which can create, change and delete. Most assistants need Editor on the calendar so they can move meetings, and Reviewer or Editor on the Inbox depending on whether they file and reply to mail.

Meeting invitations and who receives them

A delegate setting decides where meeting requests go: only to the delegate, to the delegate with a copy to the manager, or to both. If the assistant handles all scheduling, sending requests to the delegate only keeps the manager's inbox clear. Many managers prefer receiving a copy so they still know what is being booked. Choose deliberately, because the default can surprise people when invitations seem to disappear. When the assistant accepts a meeting, the organiser sees it was accepted by the assistant on behalf of the manager. That transparency is usually welcome. If the manager would rather the reply came only from them, they need to accept invites personally.

Private items and sensitive mail

Delegates can be allowed to see items marked private, or not. A manager who books medical appointments, performance reviews or personal matters in their work calendar should mark those private and leave that option off. The assistant then sees the time as busy without the details. Without that step, anything in the calendar is visible to the delegate.

For email, delegation is all or nothing at the folder level. If some correspondence is confidential, such as HR matters or negotiations, it may need to go to a separate folder the delegate does not have access to, or the manager may decide those conversations happen elsewhere. Talk this through before granting inbox access rather than after an awkward moment.

Common problems and fixes

Delegation in classic Outlook can be fragile when the manager's profile has an old or corrupted delegate list, which causes errors when saving changes or meeting requests that never arrive. Removing and re-adding the delegate often clears it. If the manager leaves the business, remember that their delegates may still be receiving their meeting requests, so update the delegate list as part of offboarding. Another frequent issue is the assistant's Outlook showing the manager's calendar but not updating changes for a while. That usually comes down to cached mode or slow sync on shared folders. Opening the calendar in Outlook on the web shows the current server copy and is a quick check.

Review delegation regularly

Delegate access tends to accumulate. An assistant who left two years ago may still have Editor on a director's inbox, or a temporary cover arrangement during parental leave may never have been reversed. Once or twice a year, list who has access to which mailboxes and calendars, and remove anything no longer needed. An administrator can run this report across the whole organisation in one go. This review also matters for the Privacy Act 2020. If an assistant can read every email the manager receives, including client personal information, that access should match their role and be removed when the role changes.