Advanced security alerts and licensing requirements

[LM]

I have 2500 users with an E3 license and 500 users with an E5 license. If I set an Advanced Alert (which requires E5) alert in the Security and Compliance center that alerts me if 5 users are deleted within 5 minutes (or something similar), then will I be alerted regardless of the licenses associated with the deleted users, or will it only tell me about deletion to those users with E5 licenses?

Thanks

[#2 · Accepted solution]

Hi Vasil,

Advanced Security Management licensing is such that you need one license per user that you are going to protect with activity and anomaly detection policies.

[#3]

Right, my bad.

[#4]

Thank you !