Microsoft 365 Defender - Activity Alert

[hocine1265]

Hello All,

There is a need in my company to monitor account that have been granted Global Administrator role. So I've decided to implement an Activity Alert

However, after activation there is no way to manage this alert on Microsoft 365 Defender dashboard. Is there a way to manage this alert strategy on PowerShell ?

Also, it seems like this strategy fire an alert every time a user is assigned an administrator role. Is there a way to limit this alert strategy to only fire alert on Global Administrator role assignment ?

Thanks in advance for your help :)