Skip to content

acceptedDomains

Accepted Domains. Domains your tenant owns and accepts email for. The acceptedDomains entity set lives under /exchange/v1.0/acceptedDomains in the Mail flow category.

Fact Value
Path /exchange/v1.0/acceptedDomains
Category Mail flow
Tier Tier 3, Mail flow
Read role MailFlow.Read.All (Community)
Write role MailFlow.ReadWrite.All (Pro)
Backing cmdlets Get-AcceptedDomain, Set-AcceptedDomain
Method Path Synopsis Role Plan
GET /exchange/v1.0/acceptedDomains List acceptedDomains entries. MailFlow.Read Community
GET /exchange/v1.0/acceptedDomains/{key} Get a single acceptedDomains entry by Identity. MailFlow.Read Community
PATCH /exchange/v1.0/acceptedDomains/{key} PATCH /acceptedDomains/{key} - partial update via Set-AcceptedDomain. MailFlow.ReadWrite Pro

List acceptedDomains entries.

Backing cmdlet: Get-AcceptedDomain. Role: MailFlow.Read (Community).

Parameter In Type Required Description
all query bool (switch) Return all results instead of the EXO default of 1000. Maps -ResultSize Unlimited on Get-AcceptedDomain; prevents silent truncation in large tenants.

Returns the tenant’s accepted domains (authoritative, internal relay, or external relay). Backed by the Get-AcceptedDomain cmdlet.

GET /exchange/v1.0/acceptedDomains?$top=3 HTTP/1.1
Authorization: Bearer {token}
HTTP/1.1 200 OK
{
"@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#acceptedDomains",
"value": [
{
"Id": "contoso.com",
"Name": "contoso.com",
"Identity": "contoso.com",
"DistinguishedName": "CN=contoso.com,CN=Accepted Domains,CN=Transport Settings,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
"Guid": "7c3a1f4e-2b9d-4a6c-8e51-d0f29a7b134e",
"ExchangeObjectId": "1f8e2d3c-4b5a-6789-90ab-cdef12345678",
"ExternalDirectoryObjectId": null,
"DomainName": "contoso.com",
"DomainType": "Authoritative",
"Default": true,
"IsDefault": false,
"IsCoexistenceDomain": false,
"IsInitial": false,
"AuthenticationType": false,
"AddressBookEnabled": "True",
"CatchAllRecipient": null,
"ExternallySecured": null,
"SendingFromDomainDisabled": "False",
"OutboundOnly": "False",
"PendingCompletion": "False",
"PendingRemoval": false,
"OutboundToAllAcceptedDomains": null,
"EnableNego2Authentication": "False",
"MatchSubDomains": "False",
"FederatedOrganizationLink": "Federation",
"AdminDisplayName": "",
"OrganizationalUnitRoot": "contoso.onmicrosoft.com",
"OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
"ExchangeVersion": "0.20 (15.0.0.0)",
"ObjectCategory": "EURPR01A017.PROD.OUTLOOK.COM/Configuration/Schema/ms-Exch-Accepted-Domain",
"ObjectClass": [
"top",
"msExchAcceptedDomain"
],
"OriginatingServer": "VI1PR01A17DC001.EURPR01A017.PROD.OUTLOOK.COM",
"ObjectState": "Unchanged",
"IsValid": true,
"WhenCreated": "2026-03-30T17:19:41+03:00",
"WhenChanged": "2026-03-30T17:19:47+03:00",
"WhenCreatedUTC": "2026-03-30T14:19:41Z",
"WhenChangedUTC": "2026-03-30T14:19:47Z",
"AzureProvisioningRegion": "eur",
"CanHaveCloudCache": false,
"CatchAllRecipientID": null,
"EmailOnly": false,
"ExternallyManaged": false,
"InitialDomain": false,
"IsDefaultFederatedDomain": false,
"LiveIdInstanceType": "Business",
"MailFlowPartner": null,
"MailFlowRegion": null,
"PendingFederatedAccountNamespace": false,
"PendingFederatedDomain": false,
"PerimeterDuplicateDetected": false,
"RawAuthenticationType": "Managed",
"SendingToDomainDisabled": false,
"SmtpDaneStatus": "Disabled"
},
{
"Id": "contoso.mail.onmicrosoft.com",
"Name": "contoso.mail.onmicrosoft.com",
"Identity": "contoso.mail.onmicrosoft.com",
"DistinguishedName": "CN=contoso.mail.onmicrosoft.com,CN=Accepted Domains,CN=Transport Settings,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
"Guid": "9b1d4f2a-6c8e-4d3b-a157-2e9f0a8c45b6",
"ExchangeObjectId": "2a9f3e4d-5c6b-7890-a1b2-c3d4e5f60718",
"ExternalDirectoryObjectId": null,
"DomainName": "contoso.mail.onmicrosoft.com",
"DomainType": "Authoritative",
"Default": false,
"IsDefault": false,
"IsCoexistenceDomain": true,
"IsInitial": false,
"AuthenticationType": false,
"AddressBookEnabled": "True",
"CatchAllRecipient": null,
"ExternallySecured": null,
"SendingFromDomainDisabled": "False",
"OutboundOnly": "False",
"PendingCompletion": "False",
"PendingRemoval": false,
"OutboundToAllAcceptedDomains": null,
"EnableNego2Authentication": "False",
"MatchSubDomains": "False",
"FederatedOrganizationLink": "Federation",
"AdminDisplayName": "",
"OrganizationalUnitRoot": "contoso.onmicrosoft.com",
"OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
"ExchangeVersion": "0.20 (15.0.0.0)",
"ObjectCategory": "EURPR01A017.PROD.OUTLOOK.COM/Configuration/Schema/ms-Exch-Accepted-Domain",
"ObjectClass": [
"top",
"msExchAcceptedDomain"
],
"OriginatingServer": "VI1PR01A17DC001.EURPR01A017.PROD.OUTLOOK.COM",
"ObjectState": "Unchanged",
"IsValid": true,
"WhenCreated": "2026-03-30T17:44:55+03:00",
"WhenChanged": "2026-03-30T17:45:00+03:00",
"WhenCreatedUTC": "2026-03-30T14:44:55Z",
"WhenChangedUTC": "2026-03-30T14:45:00Z",
"AzureProvisioningRegion": "",
"CanHaveCloudCache": false,
"CatchAllRecipientID": null,
"EmailOnly": false,
"ExternallyManaged": false,
"InitialDomain": false,
"IsDefaultFederatedDomain": false,
"LiveIdInstanceType": "Business",
"MailFlowPartner": null,
"MailFlowRegion": "",
"PendingFederatedAccountNamespace": false,
"PendingFederatedDomain": false,
"PerimeterDuplicateDetected": false,
"RawAuthenticationType": "Managed",
"SendingToDomainDisabled": false,
"SmtpDaneStatus": "Disabled"
},
{
"Id": "contoso.onmicrosoft.com",
"Name": "contoso.onmicrosoft.com",
"Identity": "contoso.onmicrosoft.com",
"DistinguishedName": "CN=contoso.onmicrosoft.com,CN=Accepted Domains,CN=Transport Settings,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
"Guid": "3d6a8c1f-7e2b-4a9d-bc05-1f4e8a2d96c7",
"ExchangeObjectId": "4b1c2d3e-6f78-90a1-b2c3-d4e5f6071829",
"ExternalDirectoryObjectId": null,
"DomainName": "contoso.onmicrosoft.com",
"DomainType": "Authoritative",
"Default": false,
"IsDefault": false,
"IsCoexistenceDomain": false,
"IsInitial": false,
"AuthenticationType": false,
"AddressBookEnabled": "True",
"CatchAllRecipient": null,
"ExternallySecured": null,
"SendingFromDomainDisabled": "False",
"OutboundOnly": "False",
"PendingCompletion": "False",
"PendingRemoval": false,
"OutboundToAllAcceptedDomains": null,
"EnableNego2Authentication": "False",
"MatchSubDomains": "False",
"FederatedOrganizationLink": "Federation",
"AdminDisplayName": "",
"OrganizationalUnitRoot": "contoso.onmicrosoft.com",
"OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
"ExchangeVersion": "0.20 (15.0.0.0)",
"ObjectCategory": "EURPR01A017.PROD.OUTLOOK.COM/Configuration/Schema/ms-Exch-Accepted-Domain",
"ObjectClass": [
"top",
"msExchAcceptedDomain"
],
"OriginatingServer": "VI1PR01A17DC001.EURPR01A017.PROD.OUTLOOK.COM",
"ObjectState": "Unchanged",
"IsValid": true,
"WhenCreated": "2026-03-30T17:01:39+03:00",
"WhenChanged": "2026-03-30T17:01:45+03:00",
"WhenCreatedUTC": "2026-03-30T14:01:39Z",
"WhenChangedUTC": "2026-03-30T14:01:45Z",
"AzureProvisioningRegion": "",
"CanHaveCloudCache": false,
"CatchAllRecipientID": null,
"EmailOnly": false,
"ExternallyManaged": false,
"InitialDomain": true,
"IsDefaultFederatedDomain": false,
"LiveIdInstanceType": "Business",
"MailFlowPartner": null,
"MailFlowRegion": "",
"PendingFederatedAccountNamespace": false,
"PendingFederatedDomain": false,
"PerimeterDuplicateDetected": false,
"RawAuthenticationType": "Managed",
"SendingToDomainDisabled": false,
"SmtpDaneStatus": "Disabled"
}
]
}

Notes: The Default domain (Default=true) is the one used when no domain is specified on a new recipient. The mail.onmicrosoft.com domain is the coexistence/routing domain.

Related: GET /exchange/v1.0/acceptedDomains/{key}

Get a single acceptedDomains entry by Identity.

Backing cmdlet: Get-AcceptedDomain. Role: MailFlow.Read (Community).

Returns a single accepted domain resolved by its domain name. Backed by Get-AcceptedDomain with -Identity {key}.

GET /exchange/v1.0/acceptedDomains/{key} HTTP/1.1
Authorization: Bearer {token}
HTTP/1.1 200 OK
{
"@odata.context": "http://localhost:5043/exchange/v1.0/$metadata#acceptedDomains/$entity",
"Id": "contoso.com",
"Name": "contoso.com",
"Identity": "contoso.com",
"DistinguishedName": "CN=contoso.com,CN=Accepted Domains,CN=Transport Settings,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=EURPR01A017,DC=PROD,DC=OUTLOOK,DC=COM",
"Guid": "7c3a1f4e-2b9d-4a6c-8e51-d0f29a7b134e",
"ExchangeObjectId": "1f8e2d3c-4b5a-6789-90ab-cdef12345678",
"ExternalDirectoryObjectId": null,
"DomainName": "contoso.com",
"DomainType": "Authoritative",
"Default": true,
"IsDefault": false,
"IsCoexistenceDomain": false,
"IsInitial": false,
"AuthenticationType": false,
"AddressBookEnabled": "True",
"CatchAllRecipient": null,
"ExternallySecured": null,
"SendingFromDomainDisabled": "False",
"OutboundOnly": "False",
"PendingCompletion": "False",
"PendingRemoval": false,
"OutboundToAllAcceptedDomains": null,
"EnableNego2Authentication": "False",
"MatchSubDomains": "False",
"FederatedOrganizationLink": "Federation",
"AdminDisplayName": "",
"OrganizationalUnitRoot": "contoso.onmicrosoft.com",
"OrganizationId": "EURPR01A017.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/contoso.onmicrosoft.com - EURPR01A017.PROD.OUTLOOK.COM/ConfigurationUnits/contoso.onmicrosoft.com/Configuration",
"ExchangeVersion": "0.20 (15.0.0.0)",
"ObjectCategory": "EURPR01A017.PROD.OUTLOOK.COM/Configuration/Schema/ms-Exch-Accepted-Domain",
"ObjectClass": [
"top",
"msExchAcceptedDomain"
],
"OriginatingServer": "VI1PR01A17DC001.EURPR01A017.PROD.OUTLOOK.COM",
"ObjectState": "Unchanged",
"IsValid": true,
"WhenCreated": "2026-03-30T17:19:41+03:00",
"WhenChanged": "2026-03-30T17:19:47+03:00",
"WhenCreatedUTC": "2026-03-30T14:19:41Z",
"WhenChangedUTC": "2026-03-30T14:19:47Z",
"AzureProvisioningRegion": "eur",
"CanHaveCloudCache": false,
"CatchAllRecipientID": null,
"EmailOnly": false,
"ExternallyManaged": false,
"InitialDomain": false,
"IsDefaultFederatedDomain": false,
"LiveIdInstanceType": "Business",
"MailFlowPartner": null,
"MailFlowRegion": null,
"PendingFederatedAccountNamespace": false,
"PendingFederatedDomain": false,
"PerimeterDuplicateDetected": false,
"RawAuthenticationType": "Managed",
"SendingToDomainDisabled": false,
"SmtpDaneStatus": "Disabled"
}

Notes: The {key} is the domain name (e.g. contoso.com). A 404 is returned if the identity doesn’t resolve.

Related: GET /exchange/v1.0/acceptedDomains

Get a single acceptedDomains entry - not found

Section titled “Get a single acceptedDomains entry - not found”

Returns a 404 when the supplied {key} does not resolve to an accepted domain. The error envelope names the backing Get-AcceptedDomain cmdlet in innerError.

GET /exchange/v1.0/acceptedDomains/{key} HTTP/1.1
Authorization: Bearer {token}
HTTP/1.1 404 Not Found
{
"error": {
"code": "NotFound",
"message": "Exchange object 'does-not-exist-12345' could not be found.",
"target": "identity",
"innerError": {
"cmdlet": "Get-AcceptedDomain"
}
},
"correlationId": "0HNLSU6PPVJ03:00000001"
}

Notes: The {key} is the domain name. An unresolvable identity yields this canonical NotFound envelope.

Related: GET /exchange/v1.0/acceptedDomains

PATCH /exchange/v1.0/acceptedDomains/{key}

Section titled “PATCH /exchange/v1.0/acceptedDomains/{key}”

PATCH /acceptedDomains/{key} - partial update via Set-AcceptedDomain.

Backing cmdlet: Set-AcceptedDomain. Role: MailFlow.ReadWrite (Pro).

Parameter In Type Required Description
canHaveCloudCache body
domainType body
enableNego2Authentication body
matchSubDomains body
outboundOnly body
sendingFromDomainDisabled body
sendingToDomainDisabled body
dryRun query bool (switch)

Partially update an accepted domain via Set-AcceptedDomain. Only the fields supplied in the body are changed; the URL key identifies the domain.

PATCH /exchange/v1.0/acceptedDomains/{key} HTTP/1.1
Authorization: Bearer {token}
Content-Type: application/json
{
"domainType": "InternalRelay",
"matchSubDomains": true,
"outboundOnly": false
}
HTTP/1.1 200 OK
Content-Type: application/json
{
"Identity": "contoso.com",
"Id": "contoso.com",
"DomainName": "contoso.com",
"DomainType": "InternalRelay",
"MatchSubDomains": true,
"OutboundOnly": false
}

Notes: Doc-derived from Wiki + write-param allowlist; not live-captured. Body fields are Wiki-valid; values are illustrative.

Related: GET /exchange/v1.0/acceptedDomains

?dryRun=true previews of any write stay on Community.