strange notififcation from Frap264

Copper Contributor

Hi,

 

Can someone help me with this alert ?

 

--------------------------------------------------------------------

Grant privilege to mailbox

Severity: Medium

Time: 12/18/2018 9:30:00 AM (UTC)

Activity: AddMailboxPermission

User: Administrator@FRAP264.PROD.OUTLOOK.COM

Details: AddMailboxPermission. This alert is triggered whenever someone gets access to read your user's email.

--------------------------------------------------------------------

 

I can't find anything about this.

Someone have eventually more information about Microsoft action or something like that ?

 

1 Reply

That's probably one of the automated tasks/workflows that grant permissions on stuff like system mailboxes, discovery mailboxes, etc. You should be able to get all the relevant details by searching the Unified audit log in the SCC or the Exchange Admin Audit log.