Microsoft has a great feature "End-user Spam Notifications" which is set in the default spam settings. This will send an email (see attached) that has several links asking if the user would like to Block Sender, Release, or Review the quarantined email. The Review link doesn't work, and receive a 403 Access Denied page. When I talked with Microsoft, they said that I could give my users Security Admin access (access to all Office 365 Security & Compliance), and that was the only way for that button to work.
Is there a way to give users access to their own quarantined emails without full Security Admin access, or remove that Review button from the notification email?
