#exchange-online 3 articles

• "User:… dont have any permissions" from the audit query API rejects the USER, not the appgotchas / graphConsent vs. Exchange audit role; Global Admin usually inherits it, so compare accounts
• A newsletter looped over /me/sendMail is not bulk e-mail — and ACS Email is no longer the way outgotchas / graphPer-mailbox and tenant limits, bulk mail through Microsoft 365 "isn't a supported use", JSON sendMail can't set List-Unsubscribe, ACS Email retires 2028; keep Graph for personal batches, send newsletters through an ESP…
• ApplicationAccessPolicy won't scope to a shared mailbox — use a mail-enabled security groupgotchas / graph"not a security principal"; scope app-only Mail.Send to a mail-enabled security group