Below should be available since last year, but i dont see them in my list. Access level change (Teams): Alerts when a team's access level is changed from private to public.External user added (Teams): Alerts when an external user is added to a team.Mass deletion (Teams): Alerts when a user deletes a large number of teamsWe have the Microsoft 365 E5-security license. Do we need another license for that ?

I suspect it was due to us enabling the Office 365 connector in Defender XDR. We got a bunch more after that

Forum Discussion

Copper Contributor

Nov 01, 2024

Solved

Below should be available since last year, but i dont see them in my list.

Access level change (Teams): Alerts when a team's access level is changed from private to public.
External user added (Teams): Alerts when an external user is added to a team.
Mass deletion (Teams): Alerts when a user deletes a large number of teams

We have the Microsoft 365 E5-security license. Do we need another license for that ?

MichelA__
Nov 07, 2024
I suspect it was due to us enabling the Office 365 connector in Defender XDR. We got a bunch more after that

MichelA__
Copper Contributor
Nov 07, 2024
I suspect it was due to us enabling the Office 365 connector in Defender XDR. We got a bunch more after that
MichelA__
Copper Contributor
Nov 06, 2024
Strangely it suddenly appeared on itself.
Yoann_David_Mallet
Microsoft
Nov 03, 2024
Hi!
Your licensing level should be fine, but I am curious on the policies you are using. Are you saying they never triggered? If you can anonymize private data and share the config in capture, it would help review (or you can also open a support case).
- MichelA__
  Copper Contributor
  Nov 03, 2024
  Yoann_David_Mallet No I cannot select them at all. I don’t see them in the list to even make a policy.
  - Yoann_David_Mallet
    Microsoft
    Nov 04, 2024
    It doesn't seem like the expected behavior. Please open a support ticket to dig further into this.