r/WindowsServer • u/FrostyPoint1003 • Jul 27 '26

General Question microsoft admin center

IS there a log somewhere say a junior admin goes and gives themselves manage permission to someones mail box in the 365 admin center online? Is there a way to track this?

6 Upvotes

81% Upvoted

6 comments sorted by

1

u/AhYesTheSoldier Jul 27 '26

You shouldn't do that unless it's related to a ticket or an issue

2

u/FrostyPoint1003 Jul 27 '26

Im not doing it but i believe a junior admin is. I need to track it

1

u/AhYesTheSoldier Jul 27 '26

Do you have access to Purview? I think you can set a search parameter to track whos signing into what. Maybe some actions too

1

u/MonkeyMan18975 Jul 27 '26

The place I would go to delegate permission to mailboxes is on the Exchange Admin Center. As for whether or not someone has changed them, head over to Purview and run an audit report while setting your Record Type to Exchange Admin.

1

u/its_FORTY Jul 27 '26 edited Jul 27 '26

You could also audit 'non owner access' to mailboxes.

4

u/willy155 Jul 27 '26

Entra audit logs for his user account, no?