"MailItemsAccess" details in Audit logs.

Microsoft Q & A 381 Reputation points
2023-01-30T17:47:19.85+00:00

How can i check the "MailItemsAccess" details in Audit logs for my E1 and E3 licensed user. As per Microsoft only for E5 licensed user we can check this. Which additional license we can apply for E1 and E3 license user to get this feature. Please confirm weather it is possible or not.

Microsoft Exchange Online
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,173 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Vasil Michev 95,181 Reputation points MVP
    2023-01-30T18:41:02.7533333+00:00

    This audit record requires the Premium Audit SKU and is not available for E1/E3 users. Refer to the official documentation for more info.

    0 comments No comments

  2. Yuki Sun-MSFT 40,856 Reputation points
    2023-01-31T02:56:59.7266667+00:00

    Hi @Microsoft Q & A,

    As per Microsoft only for E5 licensed user we can check this. Which additional license we can apply for E1 and E3 license user to get this feature. Please confirm weather it is possible or not

    Yes, the "MailItemsAccessed" event requires Audit (Premium), which is available for organizations with an Office 365 E5/A5/G5 or Microsoft 365 Enterprise E5/A5/G5 subscription.

    According to the licensing requirements for Audit (Premium) , for E3 license user, you can apply an additional "Microsoft 365 E5 Compliance add-on" or "Microsoft 365 E5 eDiscovery and Audit add-on", but there's no option available for E1 users.
    1


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.