Global Reader Role has full access to quarantined mails

%3CLINGO-SUB%20id%3D%22lingo-sub-2985883%22%20slang%3D%22en-US%22%3EGlobal%20Reader%20Role%20has%20full%20access%20to%20quarantined%20mails%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2985883%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20we%20have%20noticed%20that%20an%20administrator%20with%20an%20activated%20Global%20Reader%20Role%20(only%20this%20role%20was%20activated)%2C%20can%20perform%20all%20the%20operations%20for%20quarantined%20emails.%3CBR%20%2F%3EThis%20means%20the%20following%3A%3C%2FP%3E%3CUL%3E%3CLI%3Ehe%20can%20release%20email%3C%2FLI%3E%3CLI%3Ehe%20can%20preview%20e-mails%3C%2FLI%3E%3CLI%3Ehe%20can%20download%20e-mails%3C%2FLI%3E%3CLI%3Ehe%20can%20delete%20e-mails%20from%20quarantine%3C%2FLI%3E%3C%2FUL%3E%3CP%3ESee%20the%20screen%20shot.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22MarioKrukow_0-1637338960705.png%22%20style%3D%22width%3A%20721px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F328226i1CB57BB8A862A414%2Fimage-dimensions%2F721x320%3Fv%3Dv2%22%20width%3D%22721%22%20height%3D%22320%22%20role%3D%22button%22%20title%3D%22MarioKrukow_0-1637338960705.png%22%20alt%3D%22MarioKrukow_0-1637338960705.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20hope%20and%20expect%20this%20works%20not%20as%20designed%2C%20because%20Global%20Reader%20schould%20only%20read%20and%20nothing%20more.%3C%2FP%3E%3CP%3EHas%20anyone%20else%20noticed%20this%3F%3C%2FP%3E%3CP%3EThank%20for%20your%20help%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2986239%22%20slang%3D%22en-US%22%3ERe%3A%20Global%20Reader%20Role%20has%20full%20access%20to%20quarantined%20mails%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2986239%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F174392%22%20target%3D%22_blank%22%3E%40Arindam%20Thokder%3C%2FA%3E%26nbsp%3BFYI%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello, we have noticed that an administrator with an activated Global Reader Role (only this role was activated), can perform all the operations for quarantined emails.
This means the following:

  • he can release email
  • he can preview e-mails
  • he can download e-mails
  • he can delete e-mails from quarantine

See the screen shot.

MarioKrukow_0-1637338960705.png

 

I hope and expect this works not as designed, because Global Reader schould only read and nothing more.

Has anyone else noticed this?

Thank for your help?

 

 

1 Reply