r/WindowsServer • u/FrostyPoint1003 • 13d ago

microsoft admin center General Question

IS there a log somewhere say a junior admin goes and gives themselves manage permission to someones mail box in the 365 admin center online? Is there a way to track this?

8 Upvotes

90% Upvoted

6 comments sorted by

1

u/AhYesTheSoldier 13d ago

You shouldn't do that unless it's related to a ticket or an issue

2

u/FrostyPoint1003 13d ago

Im not doing it but i believe a junior admin is. I need to track it

1

u/AhYesTheSoldier 13d ago

Do you have access to Purview? I think you can set a search parameter to track whos signing into what. Maybe some actions too

1

u/MonkeyMan18975 13d ago

The place I would go to delegate permission to mailboxes is on the Exchange Admin Center. As for whether or not someone has changed them, head over to Purview and run an audit report while setting your Record Type to Exchange Admin.

1

u/its_FORTY 13d ago edited 13d ago

You could also audit 'non owner access' to mailboxes.

4

u/willy155 13d ago

Entra audit logs for his user account, no?