Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community

Permission to download all emails

Occasional Contributor

Anyone run into an issue where a Security Reader is able to download all emails in Threat Explorer? I expect to be able to download emails that are quarantined for analysis, but they also have access to download emails that were originally delivered to Inbox and still remain there. Trying to figure out what allows that access.

2 Replies
best response confirmed by rbenson09 (Occasional Contributor)

Hey @rbenson09 ! - thanks for your question, sounds like you need this documentation! - Investigate malicious email that was delivered in Microsoft 365, Find and investigate malicious emai...

The preview role is what gives access, and has to have been added to a role group, if that assists you on your search.


Hope this helps!



THANK YOU SO MUCH!! I've been looking everywhere for more info on this and have been back and forth with support to determine what allowed this access. Now to find out how to remove this. Very big help. Thanks again!