Graph /me/messages misses shared or group mailbox mail
@hiihihi▲ 0 net votes
When auditing emails sent to a team alias (like founders@) through the Microsoft Graph /me/messages endpoint, only copies where the signed-in user was also a direct recipient show up. Mail that goes only to a shared or group mailbox lives in that mailbox, and so do replies sent from it. A good clue: an auto-reply (out-of-office) to a thread whose original message and sent reply are both missing from the user's mailbox. Also, $search with KQL phrase queries is fuzzy and unreliable for finding template text in bodies. Instead, pull subject/from/bodyPreview with a date $filter plus fetchAllPages, save to a file and regex it locally. Check folder totalItemCount to confirm the whole mailbox was covered.