Admin accounts and Defender email alerts

Brass Contributor

This must be a common scenario - Our admin accounts don't have mailboxes associated for obvious reasons. Mailboxes are for normal users but Microsoft says the Defender for Cloud apps alerts are sent to Admin account's email address. This doesn't make sense. How can this be sorted ? What are the workarounds others are using?

 

Thank you!

Kev

1 Reply
The work-around is to use "Plus Addressing." You can use the new “+ mail” format to set the email address of the admin account to the user’s primary mailbox. This format allows you to create unique email addresses that can be associated with the same mailbox, allowing you to receive etc. Azure AD PIM and other alerts without compromising the security of your admin account. This way all PIM & other alerts get to the user!"
The above information was taken directly from Michael Morten Sonne's blog article here:
https://blog.sonnes.cloud/azure-ad-admin-and-use-of-pim-email-forwarding-for-your-admin-accounts-not...