How to Identify the Microsoft 365 Tenant in Delegation Alerts
Question details
Administrators managing multiple Microsoft 365 tenants need to identify which specific tenant generated a generic delegation alert.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing multiple Microsoft 365 tenants and receiving generic email alerts for mailbox delegation, forwarding rules, or eDiscovery actions.
- Observed behavior
- The automated delegation alerts do not identify the tenant domain in the message body, making it difficult to determine the source tenant.
Ensure you have access to the Microsoft Entra admin center for your managed tenants and an email client like Outlook that allows you to view raw internet message headers.
Check Message Headers for the Cross-Tenant ID
You can pinpoint the exact Microsoft 365 tenant by viewing the email's raw message headers and cross-referencing the internal Tenant ID.
When a mailbox is delegated, a forwarding rule is created, or an eDiscovery action occurs, Microsoft 365 sends out a standardized alert. Since these messages are generic and omit the domain name, you must extract the hidden X-MS-Exchange-CrossTenant-Id from the email headers to identify the source.
Double-click the delegation alert email in Outlook to open it in a new window. Click on 'File' and select 'Properties'.
In the Properties window, scroll through the text inside the 'Internet headers' box at the bottom. Look for the 'X-MS-Exchange-CrossTenant-Id' or 'X-Sender' fields and copy the ID value.
Log in to the Microsoft Entra admin center using your administrator credentials.
In the left navigation pane, go to 'Overview' and click on 'Properties'. Compare the 'Tenant ID' displayed here with the ID you copied from the message headers to confirm which tenant triggered the alert.
Manage Your Office Documents Efficiently with WPS Office
While you troubleshoot complex Microsoft 365 tenant alerts and Exchange configurations, you can rely on WPS Office for a lightweight, free, and highly compatible alternative for handling your daily documents, spreadsheets, and presentations.
- 1. Visit the WPS website: Navigate to the official WPS Office website to access the latest downloads.
- 2. Download the installer: Click the 'Free Download' button to get the lightweight installation package for your operating system.
- 3. Install and open: Run the installer, open WPS Office, and seamlessly start editing your existing Microsoft Office files.
Frequently Asked Questions
Why do Microsoft 365 delegation alerts exclude the tenant domain name?
Microsoft 365 generates standardized, generic alerts for actions like mailbox delegation or forwarding rule creation. Rather than injecting custom domain names into the template, it relies on backend cross-tenant IDs within the message headers to track the exact source.
Where can I find my Tenant ID in the Microsoft Entra admin center?
You can locate your Tenant ID by logging into the Microsoft Entra admin center, clicking on 'Overview' in the left-hand navigation pane, and viewing the 'Properties' tab. The Tenant ID will be listed at the top.
Are Microsoft Partner Center delegation reports different from standard Exchange alerts?
Yes, Partner Center delegation reports may have different configurations, triggers, and reporting scopes compared to standard Exchange alerts. If you are receiving alerts through the Partner Center, you may need to verify your specific partner alert configurations or contact Microsoft Support for a tailored investigation.
