The Auditor Role

What auditors can do

• Search all mailboxes with All mail. Each such search is logged as Power Search.
• Read, download, print and restore any message they find.
• Mark messages Private. Private messages disappear from every search and from full exports. Only auditors can set or remove this.
• Mark spam as Not spam.
• Open the Administration area and all its pages, including the Audit Log.
• Start a Tax audit export under Export. They see only their own audit exports.

What auditors cannot do

• Change anything in Administration: users, domains, rules, legal hold, integrations, security, billing.
• Start a full archive export.
• Set or lift legal holds.

Give someone the role

1. Open Administration > Users.
2. Add the user with role Auditor, or tick an existing user, Change role... > Auditor > Apply.

Typical use

• Data protection officer or compliance officer.
• External tax auditor during a GoBD audit, for a limited time. Remove the role or the user afterwards.

Private messages

1. Open the message.
2. Click Private in the toolbar. You see "Message marked as private".
3. On an open message, click Private again to remove the flag. You see "Private flag removed".

• Private messages do not appear in search results, also not for auditors.