Dec 18 2018 03:59 AM
Hi,
Can someone help me with this alert ?
--------------------------------------------------------------------
⚠ Grant privilege to mailbox
Severity: ● Medium
Time: 12/18/2018 9:30:00 AM (UTC)
Activity: AddMailboxPermission
User: Administrator@FRAP264.PROD.OUTLOOK.COM
Details: AddMailboxPermission. This alert is triggered whenever someone gets access to read your user's email.
--------------------------------------------------------------------
I can't find anything about this.
Someone have eventually more information about Microsoft action or something like that ?
Dec 18 2018 10:34 AM
That's probably one of the automated tasks/workflows that grant permissions on stuff like system mailboxes, discovery mailboxes, etc. You should be able to get all the relevant details by searching the Unified audit log in the SCC or the Exchange Admin Audit log.