Skip to main content
CloudCapsule
Try for Free

Troubleshooting Exchange Errors and Missing Mail Flow Data

If Exchange controls are failing or mail flow data is missing, Microsoft may have left the Exchange Administrator role unassigned during consent. How to verify and manually assign it.

If you are seeing Exchange-related control errors or mail flow traffic is not populating in CloudCapsule, the cause is typically a missing Exchange Administrator role that was not provisioned correctly by Microsoft during the consent process. This article explains why this happens and how to manually resolve it from within your Microsoft Entra Admin Center.

Common symptoms

  • Exchange policy controls are failing or not validating
  • Mail flow traffic data is not displaying for a tenant
  • Exchange-related errors appearing in the security assessment

What causes this

In rare cases, Microsoft does not correctly provision the Exchange Administrator role during the consent process. Because the role is missing at the API level, CloudCapsule is unable to assign it programmatically. This is a Microsoft-side provisioning issue outside of CloudCapsule's control. The resolution requires manually assigning the role directly in the Microsoft Entra Admin Center.

Step 1: Verify the Exchange Administrator role assignment

  1. Go to the Microsoft Entra Admin Center.
  2. Navigate to Roles and Administrators.
  3. Search for Exchange Administrator and open the role.
  4. Under Active Assignments, check whether CloudCapsule is listed.

Step 2: Manually assign the role (if missing)

  1. From the Exchange Administrator role page, click + Add Assignments.
  2. Search for CloudCapsule.
  3. Select it and confirm the assignment.

Step 3: Re-run the assessment

  1. Return to the CloudCapsule app.
  2. Re-run the security assessment for the affected tenant.
  3. Verify that Exchange controls are now validating and mail flow data is populating.

Note: Role assignment changes in Microsoft Entra may take a few minutes to propagate. If the assessment still shows errors immediately after re-running, wait a few minutes and try again.

When to contact support

If you have completed the steps above and are still experiencing Exchange errors or missing mail flow data, please contact support with the following:

  • The name and tenant ID of the affected tenant
  • A screenshot of the Active Assignments page confirming CloudCapsule is listed
  • A screenshot of the errors or missing data in CloudCapsule

Email: support@cloudcapsule.io · In-app: Navigate to Support and open a new ticket.