Jun 14 2023 05:31 AM
When I monitor our sign-in logs in the Azure portal I can see if a user tries to access the 'Microsoft Azure CLI' or the 'Azure Portal'.
What I want is an email-alert if anyone tries to access either of these two apps.
I've been looking at several places in the admin centers, but can not figure out how to do this. Is it possible to achieve this?
Jun 14 2023 11:50 AM
@PaulKoning first you need to create a log analytic workspace and connect your Azure AD diagnostic settings to it . from the log analytic workspace , create an alert rule with your conditions and action for an email notification
Jun 14 2023 07:23 PM
May consider Azure monitor for similar alert:
Create Azure Monitor alert rules - Azure Monitor | Microsoft Learn
Jun 19 2023 04:07 AM
Jun 19 2023 04:09 AM