Created by Claude - please verify

Journal rules - external targets are identified by comparing the journal address with the accepted domains.

Required Microsoft Graph permissions

Exchange.ManageAsApp — application permission, granted to the app registration with admin consent.

Endpoints: Get-JournalRule · Get-TransportConfig · Get-AcceptedDomain

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Journal Rules & Archive Destinations

Journal rules send copies of mail to an archive - often a third party outside the tenant. That is a deliberate data flow, but it has to be known, contracted and pointed at the right place.