✖

Related Products
ADManager Plus

Active Directory Management & Reporting
Download | Demo
ADAudit Plus

Real-time Active Directory Auditing and UBA
Download | Demo
ADSelfService Plus

Self-Service Password Management
Download | Demo
EventLog Analyzer

Real-time Log Analysis & Reporting
Download | Demo
AD360

Integrated Identity & Access Management
Download | Demo
Log360

Comprehensive SIEM and UEBA
Download | Demo

Minimum Scope

The roles and permissions, or minimum scope, required by a service account configured for Exchange Online reporting and auditing in Exchange Reporter Plus are listed below.

Table 1: Roles and permissions required by the service account.

Module	Role Name	Scope
Reporting	Global Reader	Get reports on all Microsoft 365 services.
Reporting	Security Reader	Get audit logs and mailbox reports.
Auditing and alerting	Security Reader	Get audit logs and sign-in reports.

The roles and permissions, or minimum scope, required by an Azure AD application configured for Exchange Online reporting and auditing in Exchange Reporter Plus are listed below.

Table 2: Roles and permissions required by the Azure AD application.

Module	API Name	Permission	Scope
Reporting	Microsoft Graph	User.Read.All	Get user and group member reports.
		Reports.Read.All	Get usage reports.
		Calendars.Read	Get users' calendar details.
Auditing and Alerting	Office 365 Management	ActivityFeed.Read	Read the activity data for the organization.
Configuration	Microsoft Graph	Application.ReadWrite.All	Modify the application details