eDiscovery Case Mailbox Search Permissions

SC-400 By islever Editorial Last updated

Plan and manage eDiscovery and Content search

Short answer

A Creating an eDiscovery case allows Admin1 to search User5's mailbox content using eDiscovery privileges, satisfying the search requirement without granting Send As permissions.

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription that contains 1.000 user mailboxes. An administrator named Admin1 must be able to search for the name of a competing company in the mailbox of a user named User5. You need to ensure that Admin1 can search the mailbox of User5 successfully. The solution must prevent Admin1 from sending email messages as User5. Solution: You modify the permissions of the mailbox of User5, and then create an eDiscovery case. Does this meet the goal?
  1. Yes Correct Answer
  2. No

Key Takeaways

The question tests whether you understand that eDiscovery cases provide a privileged search mechanism that bypasses standard mailbox permission requirements, solving the constraint of preventing 'Send As' access.

This question tests the capability of Microsoft Purview eDiscovery (Standard) to search mailbox content using legal hold and privilege controls rather than direct mailbox permissions. It establishes that creating an eDiscovery case allows Admin1 to search User5's mailbox without needing explicit send-as rights.

Common mistake: Many candidates choose 'No' because they mistakenly believe that accessing another user's mailbox requires granting explicit mailbox permissions (like Full Access or Send As), failing to recognize the elevated privileges granted by eDiscovery roles.

Expert Analysis

Why the Answer Is Correct

Correct answer: A — The solution meets the goal. In Microsoft Purview eDiscovery (Standard), you can grant users access to search mailboxes via the "eDiscovery Manager" role or by adding them as members of the eDiscovery case. This access allows searching content within the scope of the case without requiring the user to have Full Access or Send As permissions on the individual mailboxes. Therefore, Admin1 can search User5's mailbox for the competitor's name while being explicitly prevented from sending emails as User5.

Why the Other Options Are Wrong

Choosing 'No' implies that eDiscovery cannot perform this task, which is incorrect. The primary purpose of eDiscovery is to enable legal and compliance teams to search and preserve data across tenants without escalating individual mailbox permissions. Granting Full Access would allow viewing but not necessarily searching efficiently, and Send As would violate the security requirement. The proposed solution correctly isolates search capabilities from sending capabilities.

Community Comment Notes

Community feedback is split. Users like Phil_79 support the answer by noting that eDiscovery cases allow searching without explicit mailbox permissions. Others rely on AI tools confirming the logic. However, some users argue for 'No', suggesting potential confusion with eDiscovery (Premium) or specific tenant configurations, but the standard exam doctrine supports the functionality described in option A.

Exam Strategy

Always distinguish between standard mailbox permissions (Full Access, Send As) and administrative/legal privileges (eDiscovery, Compliance Search). When a scenario involves searching content without modifying user access rights, consider eDiscovery or Content Search as the primary mechanism.

Frequently Asked Questions

Does eDiscovery require Full Access permissions?

No. eDiscovery uses dedicated roles (eDiscovery Manager/Administrator) that grant search access independently of mailbox permissions like Full Access.

Can I prevent users from sending email in eDiscovery?

Yes. eDiscovery provides search-only access. It does not grant the ability to send messages or modify items unless specifically configured in Premium features.

More SC-400 FAQ →

Community Votes

A
67%
B
33%

67% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. Phil_79 👍 1 Answered A
    To search the content of a mailbox without explicit permissions on the mailbox you may use an eDiscovery case
  2. trut_hz 👍 1 Answered A
    Def yes according to multiple chatsbots.
  3. yrd350f2 👍 2 Answered A
    Copilot and chatgpt say yes
  4. Dools 👍 2 Answered B
    Correct

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

How to Add an Information Barrier Segment to SharePoint Site1

S-grade

Enforcing Sensitivity Labels for Microsoft 365 Groups

S-grade

Which Locations Can Be Configured for a Subject Rights Request?

S-grade

Activate ISO/IEC 27001:2013 Template in Compliance Manager

S-grade

← Back to SC-400 Study Guide