Alert Created with No Activity

%3CLINGO-SUB%20id%3D%22lingo-sub-752390%22%20slang%3D%22en-US%22%3EAlert%20Created%20with%20No%20Activity%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-752390%22%20slang%3D%22en-US%22%3E%3CP%3EI%20created%20a%20policy%20that%20generates%20an%20activity%20alert%20for%20MS%20Teams%20on%20MemberAdded%20or%20MemberRoleChanged.%26nbsp%3B%20This%20alert%20triggers%20a%20Flow%20and%20some%20custom%20code%20to%20evaluate%20Teams%20membership%20as%20part%20of%20our%20governance.%26nbsp%3B%20We%20today%20discovered%20that%20some%20alerts%20have%20no%20activity%20(see%20attached).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20is%20it%20possible%20for%20a%20policy%20alert%20to%20not%20have%20any%20activity%3F%3C%2FP%3E%3CP%3EIf%20I%20want%20to%20create%20a%20support%20ticket%2C%20from%20where%20should%20I%20create%20one%20-%20Azure%20portal%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-752390%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-758617%22%20slang%3D%22en-US%22%3ERe%3A%20Alert%20Created%20with%20No%20Activity%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-758617%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F2587%22%20target%3D%22_blank%22%3E%40Steven%20Sanders%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20you%20please%20confirm%20your%20admin%20role%20in%20MCAS%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegarding%20support%2C%20you%20can%20click%20on%20the%20%22%3CSTRONG%3E%3F%3C%2FSTRONG%3E%22%20on%20the%20MCAS%20portal%20page.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-759214%22%20slang%3D%22en-US%22%3ERe%3A%20Alert%20Created%20with%20No%20Activity%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-759214%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F18593%22%20target%3D%22_blank%22%3E%40Sebastien%20Molendijk%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20working%20with%20Steve%20on%20this%20issue%2C%20please%20tag%20me%20on%20future%20replies.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-759237%22%20slang%3D%22en-US%22%3ERe%3A%20Alert%20Created%20with%20No%20Activity%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-759237%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F18593%22%20target%3D%22_blank%22%3E%40Sebastien%20Molendijk%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F2587%22%20target%3D%22_blank%22%3E%40Steven%20Sanders%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EA%20little%20more%20detail%20-%20the%20activity%20associated%20with%20an%20alert%20sometimes%20shows%20up%203-10%20minutes%20later%2C%20and%20sometimes%20seems%20to%20not%20show%20up%20at%20all.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20the%20case%20of%20this%20alert%20(criteria%20is%20membership%20changes%20on%20an%20MS-Team)%2C%20it%20would%20be%20great%20if%20the%20MS-Teams%20id%20GUID%20was%20included%20in%20the%20alert%20itself%2C%20and%20for%20our%20use%20case%2C%20the%20activity%20detail%20would%20not%20even%20be%20necessary..%20While%20I%20realize%20that%20there%20are%20many%20permutations%20of%20Alerts%20that%20would%20have%20context-specific%20activity%20detail%2C%20perhaps%20there%20is%20a%20way%20to%20put%20the%20id%20GUID%20for%20the%20main%20category%20of%20Alert%20work%20load%20(like%20a%20MS-Team%20group)%20in%20the%20alert.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I created a policy that generates an activity alert for MS Teams on MemberAdded or MemberRoleChanged.  This alert triggers a Flow and some custom code to evaluate Teams membership as part of our governance.  We today discovered that some alerts have no activity (see attached).

 

How is it possible for a policy alert to not have any activity?

If I want to create a support ticket, from where should I create one - Azure portal?

 

3 Replies
Highlighted

Hi @Steven Sanders ,

 

Can you please confirm your admin role in MCAS ?

 

Regarding support, you can click on the "?" on the MCAS portal page.

Highlighted

@Sebastien Molendijk 

I am working with Steve on this issue, please tag me on future replies.

Highlighted

@Sebastien Molendijk @Steven Sanders 

A little more detail - the activity associated with an alert sometimes shows up 3-10 minutes later, and sometimes seems to not show up at all.

 

In the case of this alert (criteria is membership changes on an MS-Team), it would be great if the MS-Teams id GUID was included in the alert itself, and for our use case, the activity detail would not even be necessary.. While I realize that there are many permutations of Alerts that would have context-specific activity detail, perhaps there is a way to put the id GUID for the main category of Alert work load (like a MS-Team group) in the alert.