Forum Discussion
alert on External Sharing event
I'm trying to create an alert that will inform Security team on External Sharing event from Teams. I found that there are some controls over SharePoint and then some Activity Types related to sharing...
Teams is using SharePoint for file storage, so you need the SPO controls/actions. The list of events generated can be found for example here: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance#sharing-and-access-request-activities
In MCAS, you can use the "Access level" controls as detailed here: https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies