Notify admin when user is copying/downloading/deleting data

%3CLINGO-SUB%20id%3D%22lingo-sub-1085439%22%20slang%3D%22en-US%22%3ENotify%20admin%20when%20user%20is%20copying%2Fdownloading%2Fdeleting%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085439%22%20slang%3D%22en-US%22%3E%3CDIV%3EHow%20can%20we%20achieve%20below%20task%20in%20OneDrive%20for%20business.%3C%2FDIV%3E%3CDIV%3EIf%20any%20user%20is%20copying%20%2F%20downloading%20%2F%20deleting%20data%20more%20than%20---%20MB%20or%26nbsp%3B%20___%20no.%20of%20files%20from%20One%20Drive%2C%20then%20system%20should%20send%20an%20email%20alert%20notification%20to%20Administrator.%20At%20the%20same%20time%2C%20activity%20should%20NOT%20be%20restricted%20for%20user.%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1085439%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EFiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085522%22%20slang%3D%22en-US%22%3ERe%3A%20Notify%20admin%20when%20user%20is%20copying%2Fdownloading%2Fdeleting%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085522%22%20slang%3D%22en-US%22%3EAt%20this%20moment%20there%20isn't%20any%20feature%20available%20to%20control%20what%20you%20mentioned.%20Raising%20a%20UserVoice%20might%20be%20the%20way%20to%20go%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085771%22%20slang%3D%22en-US%22%3ERe%3A%20Notify%20admin%20when%20user%20is%20copying%2Fdownloading%2Fdeleting%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085771%22%20slang%3D%22en-US%22%3EDo%20you%20mean%20without%20being%20and%20Admin%20of%20the%20users'%20ODFB%3F%20The%20only%20way%20you%20have%20to%20do%20some%20%22monitoring%22%20on%20behalf%20of%20end%20users%20is%20by%20means%20of%20the%20Audit%20Log%20Search%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085952%22%20slang%3D%22en-US%22%3ERe%3A%20Notify%20admin%20when%20user%20is%20copying%2Fdownloading%2Fdeleting%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085952%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20only%20tool%20that%20allows%20you%20to%20configure%20something%20like%20this%20is%20the%20activity%20policies%20functionality%20in%20MCAS%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fuser-activity-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fuser-activity-policies%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor
How can we achieve below task in OneDrive for business.
If any user is copying / downloading / deleting data more than --- MB or  ___ no. of files from One Drive, then system should send an email alert notification to Administrator. At the same time, activity should NOT be restricted for user.
3 Replies
Highlighted
At this moment there isn't any feature available to control what you mentioned. Raising a UserVoice might be the way to go
Highlighted
Do you mean without being and Admin of the users' ODFB? The only way you have to do some "monitoring" on behalf of end users is by means of the Audit Log Search
Highlighted

The only tool that allows you to configure something like this is the activity policies functionality in MCAS: https://docs.microsoft.com/en-us/cloud-app-security/user-activity-policies