Change Event Risk Level Azure AD Identity Protection

Copper Contributor

Is there a way to change the Risk Level for "Impossible travel to atypical location" from medium to high? In 99% of our cases this is a very bad occurance and needs immediate attention. I at least need to way to alert on this event.

3 Replies

Well you can configure an action other than just sending a notification email. Or you can simply change the Alerts level to fire up notification email even on Medium risk events.

I have it alerting on medium events but there are so many of them with a mobile workforce that at times it is overwhelming. To me there login from unusal location is a lower severity than the login from locations with impossible travel.

Other than that, you can use ASM/Cloud app security to generate notifications (or perform other actions) upon detecting such events.