Forum Discussion

Copper Contributor

Jul 24, 2025

Solved

Accessing Content explorer data via SPN

Hi all, I am trying to get all the data from Content explorer for SITs matched files using https://learn.microsoft.com/en-us/powershell/module/exchange/export-contentexplorerdata?view=exchange-ps. I ...

Content explorer

powershell

Sensitive Info Type

VasilMichev
Jul 30, 2025
IIRC application permissions are not supported for the cmdlet, but you assign role groups to a service principal via PowerShell:

Add-RoleGroupMember -Identity "ContentExplorerContentViewer" -Member xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Make sure to provision the SP first via New-ServicePrincipal. But again, afaik even if you grant the permissions, it is not currently supported.

Prathista Ilango

Microsoft

Jul 30, 2025

Hello

Make sure you followed all the steps to set up certificate-based authentication as below,

App-only authentication in Exchange Online PowerShell and Security & Compliance PowerShell | Microsoft Learn

If this is configured properly, then the permissions required is Content Explorer List Viewer role, as per the below article

https://learn.microsoft.com/en-us/powershell/module/exchange/export-contentexplorerdata?view=exchange-ps#description

Hope this helps!

Regards,

Please mark as solution, if you find the answer helpful. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.