Forum Discussion
RBAC role to allow you to see in Exchange admin portal messagetrace
I’m trying to build management role, that will allow Admin to access and run messagetrace https://admin.exchange.microsoft.com/#/messagetrace I already add Message Tracking role Assignment, but mes...
In Exchange Online, access to the Message Trace in the EAC is not controlled only by the Message Tracking role. That role gives PowerShell access, but the GUI in the Exchange admin portal is tied to broader built-in roles.
To see Message Trace in the portal, the account needs to be in a role group that includes both Message Tracking and View-Only Recipients (for directory lookup). The easiest way is to add the user to the Compliance Management or View-Only Organization Management role groups, which surface the GUI option. If you want a custom RBAC role, you must include Message Tracking, View-Only Recipients, and View-Only Configuration to replicate the necessary access.