Forum Discussion
KokSoon
Nov 21, 2021Copper Contributor
Protect confidential mailbox - Alert setting
Global Administrator can gain access to big boss mailbox by granting himself access to the mailbox or create email forwarding rule. One way to address this is to have security alert setting to noti...
KokSoon
Nov 22, 2021Copper Contributor
Thanks for the advice on exclusive scope & privileged access.
The concern will still be there with this approach – GA can change the exclusive role assignment.
The ideal this that whenever GA changes any of such settings like modifying existing alert, or granting himself access to the mailbox, or creating the forwarding rule, there should be an alert email to a third party.
Is it possible to have the alert email (sent to the existing third party before the modification) when GA modify the existing alert?
Thanks.
VasilMichev
Nov 22, 2021MVP
GA can change anything, including disabling those alerts you want so badly 🙂 And again, alerts are reactive, and even worse - fire with huge delays (read hours). But if you think that's the way to go, you can export the unified audit log data to external system and configure alerts there.