Admins with full access to Office 365 may do far more than just read messages; they can delete emails, modify or copy mailbox content, and even forward crucial emails to third parties, all of which might compromise data security or result in data loss. This restricts the amount of material you can access; but, with Office 365 access, you can run and examine an audit report to identify which mailboxes an admin has visited and has access to. To find out how to follow the instructions below. As a result, users must be informed whenever an administrator in Office 365 accesses another user’s or a shared mailbox, and be able to track exactly what they did during each access session. While there are a few unusual ways to obtain and examine this data, the majority of the useful techniques are only available through EAC, PowerShell, and Azure AD. However, this can be done natively through EAC following the steps below.
Step by step process – How to see which mailboxes a user has access to: Office 365
- First, sign into your Office 365 account.
- Use the app launcher and navigate to admin.
- In the admin dashboard, under “admin center”, click on “Exchange”(you may need to click “Show all” to access).
- Under “recipients” click on “Mailboxes”.
- Select the user Mailbox and double tap on it.
- Click on “Mailbox Delegation”.
- Now you can see which users have full access to your Mailbox. Once you have the information you can click “Close”.
The results will show you exactly who has access to the Mailbox, who carries out what responsibilities, and when and where they occurred. You may check through each mailbox to see if the user has to Send as/Send on Behalf/Full Access rights. We don’t want to waste time opening all of the emails one by one to see if we can find the user in the list.
Exchange keeps track of everything, even admins. This mailbox user log is saved as a listing in a hidden folder in the user mailbox. Non-owner mailboxes, who accessed each mailbox and when, non-owner actions, and whether or not the activities were successful are all presented as search results in the report.
Non-owners, such as administrators and users with mailbox access, have their activity recorded by Exchange (who are called delegated users). You may also restrict your search to users from within or outside your organization. The mailbox log is where Exchange stores information.
   |
Recommended Software
Other methods to see which users have access to a mailbox
PowerShell is another option for viewing audit information. You may execute the operation using scripted instructions, allowing Microsoft to handle the work and audit the mailboxes for you. Codes will be needed, however, they may be obtained in Microsoft PowerShell’s script commands. This approach has the risk of causing an error if the command or command sequence is not written correctly.
Another option is to utilize retention to build a new rule that lets users generate a command directly in EAC, giving them quick access to the information. Users must verify that mistakes in the command or sequence of commands used to allow for auditing are typed out correctly, just as they must when running a command with the aid of PowerShell.
Check the search results window to check if the non-owner mailbox access report was successful. The results pane displays the mailboxes for which you ran the report, whether for a solitary user or a group of users. If no results are returned for a particular mailbox, it’s possible that no non-owner access was permitted, or that no non-owner access was authorized during the time period specified. As previously said, make sure audit logging is enabled for the mailboxes you want to monitor for non-owner access.
   |
Setting permissions
While network settings established by administrators prohibit you from establishing a new rule or directing a task using Powershell, you should also be aware of other permissions that may limit you from seeing information in Exchange.
| Owner | All objects and files may be created, read, modified, and deleted, as well as subfolders. You can alter the permission levels that other users have for the folder as the folder owner. (Note that this does not apply to delegates.) |
| Publishing editor | All documents and files may be created, read, modified, and deleted, as well as subfolders. (Note that this does not apply to delegates.) |
| Editor | All things and files may be created, read, modified, and deleted. |
| Publishing Author | Create and read things and files, as well as subfolders, as well as change and remove items and files. (Note that this does not apply to delegates.) |
| Author | Create, read, and change things and files, as well as remove items and files you’ve created. |
| Contributor | Only create objects and files. The folder’s contents do not appear. (Note that this does not apply to delegates.) |
| Reviewer | Only read objects and files. |
| Custom | Carry out the tasks specified by the folder’s owner. (Note that this does not apply to delegates.) |
| None | You do not have authorization. You are unable to open the folder. |
In depth Step by step process – How to see which mailboxes an admin has accessed Office 365?
Step by step breakdown:
Use your account details or if you have a current Skype account with the Office account in question, you can use this.
- Use the application launcher to navigate towards “Admin”.
The launcher is illustrated by nine dots in the right corner, click on it and find “Admin” as shown above.
- In the admin dashboard, under “admin center”, click on “Exchange”(you may need to click “Show all” to access).
In this example “Exchange” was pinned to the menu bar, however, in your dashboard you may need to click on “show all” which will bring you to the Exchange panel.
- Under “recipients” click on “Mailboxes”.
- Select the user Mailbox and double tap on it.
- Click on “Mailbox Delegation”.
- Now you can see which users have full access to your Mailbox. Once you have the information you can click “Close”.
That’s it for this Blog — thank you for taking time out to read our content, please feel free to email our team about how it went if you followed the steps or if you need more help with the questions we answered in this Blog.