Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

security roles office365

is there a specific security role in office365 which would allow our risk team to run message trace requests and also have complete unrestricted to the various audit logs, such as the unified audit log. e.g. that mentioned in here:

https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance

it would be also useful to identify the current auditing settings, e.g. what is and what is not being captured, so identifying
ASKER CERTIFIED SOLUTION
Avatar of Vasil Michev (MVP)
Vasil Michev (MVP)
Flag of Bulgaria image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

Ok thanks. Is there a lower privelege role that can run message traces so we could combine the two?
Avatar of Pau Lo

ASKER

which specific systems is the unified audit log  querying ?
The unified audit log is querying data across all O365 workloads, thus the name. As for message trace, you could do with the Exchange-specific View-Only Recipients role.