Set Alert Email on all policies

%3CLINGO-SUB%20id%3D%22lingo-sub-1562062%22%20slang%3D%22en-US%22%3ESet%20Alert%20Email%20on%20all%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1562062%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20configure%20alert%20notification%20emails%20on%20all%20policies%20in%20bulk%3F%20I%20have%20a%20shared%20mailbox%20that%20I'd%20like%20alerts%20to%20be%20sent%20to%20so%20that%20they%20are%20created%20as%20service%20desk%20tickets%20(our%20ITSM%20listens%20to%20the%20shared%20mailbox).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20another%20way%20to%20achieve%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1562062%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1563396%22%20slang%3D%22en-US%22%3ERe%3A%20Set%20Alert%20Email%20on%20all%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1563396%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F747548%22%20target%3D%22_blank%22%3E%40thehadricus%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%20there%2C%20I'm%20afraid%20not.%26nbsp%3B%20As%20per%20this%20article%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fmanaging-alerts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fmanaging-alerts%3C%2FA%3E%26nbsp%3B-%20alerts%20are%20managed%20in%20their%20respective%20policies.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569738%22%20slang%3D%22en-US%22%3ERe%3A%20Set%20Alert%20Email%20on%20all%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569738%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3BThat's%20really%20unfortunate%2C%20as%20there%20are%20some%20alert%20types%20generated%20by%20Azure%20ATP%20where%20you%20can't%20configure%20an%20email%20notification%20from%20within%20MCAS.%20It%20can%20be%20done%20from%20within%20Azure%20ATP%20though.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20doesn't%20look%20good%20for%20organisations%20investing%20in%20E5%2C%20with%20such%20a%20large%20number%20of%20discrete%20management%20portals%20with%20minimal%20integration%20between%20them%2C%20alerts%20and%20incidents%20appear%20in%20multiple%20places%20without%20consistency.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi all!

 

Is there a way to configure alert notification emails on all policies in bulk? I have a shared mailbox that I'd like alerts to be sent to so that they are created as service desk tickets (our ITSM listens to the shared mailbox).

 

Is there another way to achieve this?

2 Replies

@thehadricus 

 

Hi there, I'm afraid not.  As per this article - https://docs.microsoft.com/en-us/cloud-app-security/managing-alerts - alerts are managed in their respective policies.

@PeterRising That's really unfortunate, as there are some alert types generated by Azure ATP where you can't configure an email notification from within MCAS. It can be done from within Azure ATP though.

 

This doesn't look good for organisations investing in E5, with such a large number of discrete management portals with minimal integration between them, alerts and incidents appear in multiple places without consistency.