question

RajanR-7262 avatar image
0 Votes"
RajanR-7262 asked JimBjrklund-1108 commented

Can a Global Reader read email content?

Microsoft description mentions to Assign the global reader role to users who need to view admin features and settings in admin centers that the global admin can view. The global reader admin can't edit any settings.

However, can a global reader access other inboxes / email / files etc?

microsoft-graph-usersmicrosoft-graph-permissions
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CarlZhao-MSFT avatar image
0 Votes"
CarlZhao-MSFT answered JimBjrklund-1108 commented

Hi @RajanR-7262

Yes sure, Global Reader can read everything a global administrator can read.


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

How can a Globar Reader in practice get access to another user's email content?
The methods I have found seem to require that access is first assigned, which the Global Reader should not be able to do? Is there another way that I'm missing?
https://docs.microsoft.com/en-us/exchange/troubleshoot/user-and-shared-mailboxes/how-to-access-other-mailboxes#which-microsoft-365-plan-do-you-use

0 Votes 0 ·
RajanR-7262 avatar image
0 Votes"
RajanR-7262 answered

Thanks Carl. Is there an app permission that would let me read only the exchange settings and not the data?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.