Forum Discussion

Brass Contributor

May 01, 2020

Solved

Monitoring partner relationship activity

Hi everybody, We need to authorise Office 365 tenant access to a partner so that they can implement a Dynamics-based system. Relationship: Reseller Admin roles: Global administrator, Helpdes...

VasilMichev
May 04, 2020
They are still performing those admin actions in the context of a user, so just search from events corresponding to said user.

Brass Contributor

May 03, 2020

Thanks for your help. I don't think the "eligible" GA role and PIM will work as the partner needs full admin access to the tenant ongoing to allow Dynamics to function.

In regards to the audit log, do you know how to specifically see logged activity by the partner?

MVP

May 04, 2020

They are still performing those admin actions in the context of a user, so just search from events corresponding to said user.

ashmelburnian
Brass Contributor
May 05, 2020
Is there any way to connect a partner connection directly to a specific global admin user account?

Note that if they access the tenant admin console they would be doing so via the MS Partner portal / not entering login details.
- VasilMichev
  MVP
  May 05, 2020
  Well they do provide credentials where accessing the partner portal, don't they?
  - ashmelburnian
    Brass Contributor
    May 06, 2020
    VasilMichev That's true. Unfortunately we don't know the username the partner will use, only their domain.
    
    The https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance/new-protectionalert?view=exchange-ps cmdlet may work for what I require, however I'm not sure if it can match any.user@partnerdomain.com. The cmdlet might be something like the following which I'll try to test tomorrow.
    
    New-ProtectionAlert -Name "Partner Tenant Activity" -NotifyUser user@tenantdomain.com -ThreatType Activity - Filter "Activity.TargetUserOrGroupType -like 'partnerdomain.com'"

Resources