Exchange.ManageAsApp
— application permission, granted to the app registration with admin consent.
Licence: Exchange Online Protection; Defender for Office 365 Plan 1/2 for Safe Links, Safe Attachments and impersonation.
Endpoints:
Get-EOPProtectionPolicyRule · Get-ATPProtectionPolicyRule · Get-AntiPhishPolicy · Get-SafeLinksPolicy · Get-SafeAttachmentPolicy · Get-AtpPolicyForO365 · Get-HostedOutboundSpamFilterPolicy · Get-MalwareFilterPolicy
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
EOP & Defender for Office 365 Posture
Are the protections that stop phishing and malware actually switched on - preset policies, spoof intelligence, impersonation protection, Safe Links, Safe Attachments, zero-hour auto purge - and is automatic forwarding to outside addresses blocked?