Share via

Message Trace Option missing under Mail Flow in EAC

Mark Bovenzi 60 Reputation points
2024-08-06T17:34:43.88+00:00

We are running a Hybrid Environment; we activate Global Admin access through Privilege Identity Management. We have two roles setup for users, Global Administrator & Exchange Recipient Administrator. Up until a month or so ago, I was able to run a Message Trace in EAC. Then one day, I came into work, and it was missing. I asked around to my coworkers and it's available to them. I've opened up a ticket with Azure Support and O365 support, who didn't know what the issue was. Has anyone run into this before?

Thanks!

User's image

Exchange Online
Exchange Online

A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.

Microsoft 365 and Office | Access | For business | Windows

Answer accepted by question author
  1. Anonymous
    2024-08-07T08:23:15.8366667+00:00

    Hello, @Mark Bovenzi,

    Welcome to the Microsoft Q&A platform!

    Based on your description, I wanted to check with you first to make sure you can use the Get-Messagetrace command in PowerShell to trace emails. Below is a screenshot of what you can get if you enter this command and trace the email successfully.User's image

    If you don't get the response shown above, my guess is that there is a problem with your permissions, I suggest you remove them , re-add them and have a test again, here are the permissions needed to run the email tracking.User's image

    Please feel free to contact me if you have any queries. If my reply is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding.

    Best,

    Alex Zhang


3 additional answers

Sort by: Most helpful
  1. Phil Ramoel Augustine Roxas Fajilago 20 Reputation points
    2026-04-04T23:53:03.4333333+00:00

    One of the final workarounds: Go the Exchange admin center > Roles > Admin roles > Organization Management > Permissions > Select all roles > Save

    There may be 1 hour default propagation time for any role updates.

    0 comments No comments

  2. Andy David - MVP 160K Reputation points MVP Volunteer Moderator
    2024-08-06T20:05:59.56+00:00

    Once you are elevated to GA, open a new browser or incognito and then see if that works. Recipient Manager in Exchange doesnt give you access to message trace.

    I would also note that I prefer Defender for message tracing anyway. its much better and with GA you should have access.

    https://learn.microsoft.com/en-us/defender-office-365/message-trace-defender-portal


  3. Andy David - MVP 160K Reputation points MVP Volunteer Moderator
    2024-08-06T18:41:02.9166667+00:00

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.