Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Global Reader Role has full access to quarantined mails

Copper Contributor

Hello, we have noticed that an administrator with an activated Global Reader Role (only this role was activated), can perform all the operations for quarantined emails.
This means the following:

  • he can release email
  • he can preview e-mails
  • he can download e-mails
  • he can delete e-mails from quarantine

See the screen shot.

MarioKrukow_0-1637338960705.png

 

I hope and expect this works not as designed, because Global Reader schould only read and nothing more.

Has anyone else noticed this?

Thank for your help?

 

 

2 Replies

@Vasil Michev Mario Krukow - This should not happen and the issue does not reproduce in my lab. If you are able to reproduce the issue please open a support ticket and we will look into it.