Emails With Large Attachments (over 10 MB) - PREVIEW

The question it answers: Which messages in the members’ mailboxes carry attachments over 10 MB, who sent them and to whom?

This report will take a while to load when using live data and depending on the amount of users present in the directory.

Note

Scans every member mailbox (users with a mail address; guests skipped) and every message with attachments in it, all folders. Attachments over 10,000,000 bytes (10 MB, decimal) are listed. A mailbox that cannot be read is logged and skipped; if none can be read the page shows the error. Shared mailboxes are included when they have a user object with a mail address.

At a glance

Where in the app	Exchange Online › Mailboxes › Emails With Large Attachments
Workload	Exchange Online
Kind	Table
Data	Read from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed).
Licence	Exchange Online.
Report id (API and MCP)	exchange.traffic.emails-with-large-attachments

Columns

Column	Key	Type
Sender	Sender	Text
Recipients (TO)	ToRecipients	Text
Attachments	Attachments	Text

What it needs

Licence: Exchange Online.

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
User.Read.All	Microsoft Graph	Read all users’ full profiles
Mail.Read	Microsoft Graph	Read mail in all mailboxes

Data sources it reads

• GET /v1.0/users?$select=id,displayName,mail,userType (all pages)
• GET /v1.0/users/{id}/messages?$filter=hasAttachments eq true&$expand=attachments($select=name,size) (all pages, per user)

Through the API and MCP

GET /ir-api/v1/reports/exchange.traffic.emails-with-large-attachments?size=100

An AI assistant reads it with the MCP tool get_report and the id exchange.traffic.emails-with-large-attachments. The client needs the Read grant for Exchange Online. See Using the API.