Minimum Scope

The roles and permissions, or minimum scope, required by a service account configured for Exchange Online reporting and auditing in Exchange Reporter Plus are listed below.

Table 1: Roles and permissions required by the service account.

Module Role Name Scope

Reporting

Global Reader

Get reports on all Microsoft 365 services.

Security Reader

Get audit logs and mailbox reports.

Auditing and alerting

Security Reader

Get audit logs and sign-in reports.

The roles and permissions, or minimum scope, required by an Azure AD application configured for Exchange Online reporting and auditing in Exchange Reporter Plus are listed below.

Table 2: Roles and permissions required by the Azure AD application.

Module API Name Permission Scope

Reporting

Microsoft Graph

User.Read.All

Get user and group member reports.

Reports.Read.All

Get usage reports.

Calendars.Read

Get users' calendar details.

Auditing and Alerting

Office 365 Management

ActivityFeed.Read

Read the activity data for the organization.

Configuration

Microsoft Graph

Application.ReadWrite.All

Modify the application details

Copyright © 2023, ZOHO Corp. All Rights Reserved.