Yes, there are roles that allow an admin or legal team to review all sorts of activity across M365. That’s not MSFT, though. In the US, you should never expect

Yes, there are roles that allow an admin or legal team to review all sorts of activity across M365. That’s not MSFT, though. In the US, you should never expect privacy on company owned devices or services. The company may even be decrypting SSL sessions, revealing passwords in the clear (though they shouldn’t…).