Exchange Online · View-Only & Reporting

View-Only Organization Management

Members can view the properties of any object in the Exchange Online organization. Read-only access for monitoring and auditing purposes.

Scope: Read-only access to entire Exchange Online organization

Permissions

  • View-Only Configuration - View all organization and mail flow settings
  • View-Only Recipients - View all recipient properties

Common use cases

  • Auditing Exchange configuration
  • Monitoring without change access
  • Reporting and analysis
  • Compliance oversight

Best practices

  • Use for audit and oversight roles
  • Suitable for compliance monitoring staff
  • Combine with Security Reader for broader view
  • Assign to reporting tools that need Exchange data

Security considerations

  • Cannot modify any settings
  • Can view all configuration including security settings
  • Suitable for automated monitoring systems

Official Microsoft Learn documentation →

Open the interactive RBACMap →