Hunting Graph API access to Exchange with GraphAPIAuditEvents
Intro Any time you agree to a way of reaching the mail system other than the standard one, you end up with a governance problem. With POP3/IMAP/EWS (assuming you did not bother to set Set-CASMailbox properly) it’s usually the nightmare of debugging text connection logs - or, even worse, IIS W3C logs. With Graph API it is by design almost impossible: there is no per-message protocol log you can just Get- from Exchange Online. There are some reports, but - ironically - not in Exchange itself; they live on the admin.cloud.microsoft site, and realistically an Exchange admin only sees them with the Exchange Administrator (or Report Reader) role. And even that is not enough. ...