For on-premises customers that instantly forward from their on-premises email program as a result of Microsoft 365, you need to produce a mail movement rule to trace these end users. For standard Recommendations on how to make a mail movement rule, see Use the EAC to create a mail movement rule.EXCEPTION: If an app within the Restricted application