Forum Discussion
underQualifried
Nov 04, 2025Brass Contributor
Explorer permission to download an email
Global Admin is allegedly not sufficient access to download an email. So I have a user asking for a copy of her emaill, and I'm telling her 'sorry, I don't have that permission', I'm only global admi...
AladinH
Dec 24, 2025Iron Contributor
Just to clarify, there are actually two different things getting mixed together here, which is why it feels inconsistent.
- If you’re talking about downloading from the Defender email entity page, that’s controlled by Defender roles (Security Admin / Security Operator or a custom role group with Preview). Global Admin alone doesn’t always cover this.
- If you’re talking about actually exporting the email content, then Purview eDiscovery is the reliable way, which requires eDiscovery Manager or Compliance Administrator.
Global Admin doesn’t have default access to mailbox content by design, and the reason this works in some tenants and not others is usually legacy role assignments or older tenant setups.