[SOLVED] MCAS - External User Added Policy/Alert Question in Teams

[amueller-tf]

Hi,

we have the "External user added (Teams)" policy enabled in MCAS. Alerts are properly triggered for this policy but the information are not useful as we don't see the information about the user (email, IP, ...) who added the external user.

Is there a setting that needs to be enabled to see that information?

Thanks,

Andre

[#2 · Accepted solution]

I figured it out. The external user was added through an access package in Teams.