Forum Discussion

BrianStrain's avatar
BrianStrain
Copper Contributor
Dec 14, 2022

Microsoft Purview > Alert policy questions

So, I setup and Alert policy in Purview/Compliance.

 

For the activity I selected 'Granted mailbox permission'.

 

I added myself to receive an email alert.

 

This alert seems to be working but only if I add 'Full access' permission to a mailbox. I do NOT receive an alert when I add Send As, or Send on behalf. I would assume those 2 would also trigger this alert. Am I doing something wrong?

 

Thanks

compliance
security
  • VasilMichev's avatar
    VasilMichev
    MVP
    Dec 14, 2022
    The alert only covers Full access permissions, as it corresponds to detection of the Add-MailboxPermission cmdlet. No other permission types are covered.
    • BrianStrain's avatar
      BrianStrain
      Copper Contributor
      Dec 14, 2022
      Vasil, thanks so much for the quick reply! So, no way to get an alert for 'Send as' or 'Send on behalf' ? I can pull this info using PS but wanted an email alert. Again, thanks so much!
      • VasilMichev's avatar
        VasilMichev
        MVP
        Dec 14, 2022
        You can create a new alert via PowerShell, and use Add-RecipientPermission as operation. For send on behalf of it's not as easy, as the corresponding cmdlet covers a lot more operations, and afaik, you cannot filter based on the parameters used.

Resources