'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Grayed-Out Preview and Download Options in Exchange Message Trace
Question details
The Preview and Download options in Exchange Message Trace are disabled (grayed out) and inaccessible, even for a Global Administrator with an E5 license.
- Product
- Microsoft 365 / Exchange Online
- Device & OS
- not provided
- Scenario
- Attempting to preview or download a message trace report in the Exchange Admin Center.
- Observed behavior
- The Preview and Download buttons remain grayed out and cannot be clicked despite having a Global Administrator role and appropriate licensing.
Ensure you have access to the Microsoft 365 Exchange Admin Center and hold sufficient privileges (such as Global Admin) to create and modify administrator role groups.
Assign the Preview Role via a New Role Group
Global Administrator rights do not automatically grant message preview access. Creating a custom role group explicitly forces the permission update.
Due to privacy safeguards within Microsoft 365, administrators must be explicitly assigned the 'Preview' role to view message contents. Assigning this through a dedicated role group is the most effective way to grant access.
Navigate to the Exchange Admin Center (EAC) and go to Roles, then click on Admin roles.
Click on 'Add role group' to start creating a new custom permissions group.
Provide a name for the group (e.g., 'Message Trace Previewers') and assign the 'Preview' role to it.
Add the affected administrator accounts as members of this new role group and save your changes.
Wait approximately 5 to 10 minutes before rerunning the message trace to allow the system to apply the new permissions.
Open a Microsoft 365 Support Ticket
If permissions are correctly applied but the options remain unavailable, a backend server issue may be preventing access.
Looking for a Reliable and Free Office Suite?
While Microsoft 365 provides complex enterprise administration tools, everyday document productivity shouldn't require administrative hassle. WPS Office offers a free, lightweight, and highly compatible alternative for handling documents, spreadsheets, and presentations seamlessly.
- 1. Visit the Website: Navigate to the official WPS Office website on your device.
- 2. Download the Installer: Click the free download button appropriate for your operating system.
- 3. Install the Software: Run the setup file and follow the on-screen instructions to complete the installation.
Frequently Asked Questions
Why are Preview and Download options grayed out even if I am a Global Admin?
In Exchange Online, the Global Administrator role does not automatically grant the explicit 'Preview' role. This is designed as a privacy and security boundary. You must manually assign this specific role to view message contents.
How long does it take for Exchange admin role changes to take effect?
Role assignments in the Exchange Admin Center typically take 5 to 10 minutes to propagate across the tenant. In rare cases involving high server loads, replication can cause delays of up to an hour.
What should I do if the Message Trace options are still disabled after role assignment?
If waiting does not resolve the issue and the role is confirmed to be assigned, it may be caused by a backend server anomaly. You should open a service ticket via the Microsoft 365 admin center so the dedicated support team can investigate.
