Before discovering and monitoring Exchange Online, ensure that the Exchange Online user account, which is configured in the Security Manager has the following permission and membership:
Any one of the Customized administrator roles. The recommended role is Service administrator.
Membership in the Exchange View-Only Organization Management.
To configure the Exchange Online user account in the Security Manager, see Configuring Security Manager to run Exchange Online Discovery.
For information on the Exchange Online permissions, see the Microsoft article.