Forum Discussion

frank_df's avatar
frank_df
Copper Contributor
Jun 16, 2022

Azure AD Identity Protection Notify Users

Hello,

 

In Identity Protection, is there a way to notify users when a risk detection happens?

I do not refer to "Users at risk detected alerts" nor to the "Weekly Digest".

I just need users are sent an e-mail when a risk is detected regarding their own account.

 

Thank you.

Kind regards,

 

Francesco

Conditional Access
identity protection
microsoft defender for cloud apps
security

4 Replies

Sort By
  • VasilMichev's avatar
    VasilMichev
    MVP
    Jun 16, 2022
    Not by default, no. You can create a custom alert by scraping the corresponding risk detection events from the audit log.
      • VasilMichev's avatar
        VasilMichev
        MVP
        Jun 17, 2022
        There are many options, you can also get the Azure AD logs via the Graph API, query the Unified audit log in M365 via PowerShell or use the management activities API, etc.

Resources