User:someone@contoso.onmicrosoft.com dont have any permissions
What causes it and how to fix it:
- "User:… dont have any permissions" from the audit query API rejects the USER, not the appConsent vs. Exchange audit role; Global Admin usually inherits it, so compare accountsCause and fix →