TERMINOLOGY
Throughout SharedConX documentation, the sales page, and the product itself, the term “security group” refers specifically to one exact object type in Exchange and Active Directory: a Mail-Enabled Universal Security Group (MESG). This page defines exactly what that means and why it is the only group type SharedConX supports.
A Mail-Enabled Universal Security Group is an Active Directory security group with Universal scope that has also been mail-enabled in Exchange. This dual nature is what makes it useful for shared mailbox permission automation: it carries a security context (so it can be granted Full Access, Send As, or Send on Behalf permissions), and it has an email address and Exchange attributes (so it shows up correctly as a recipient object).
In Exchange, this object type is technically categorized as a distribution group — even though it has a security context. Exchange refers to every mail-enabled group as a “distribution group,” regardless of whether it carries security permissions. This is why you may see it listed under “Distribution Groups” in the Exchange Admin Center, even though it is functioning as a security group.
| Group type | Security context | Mail-enabled | Supported by SharedConX |
|---|---|---|---|
| Universal Security Group (mail-enabled) | Yes | Yes | Yes — this is the required type |
| Universal Security Group (not mail-enabled) | Yes | No | No — must be mail-enabled first |
| Universal Distribution Group | No | Yes | No — cannot hold permissions |
| Domain Local / Global Security Group | Yes | Cannot be mail-enabled | No — convert scope to Universal first |
If your organization already uses Domain Local or Global security groups for mailbox permissions, they can be converted to Universal scope and then mail-enabled — this does not require recreating group membership. During onboarding, SharedConX identifies groups that need conversion and includes this in the setup plan.