Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

How to create an alert in the compliance center when a Temporary Access Pass is created for a user

Copper Contributor

How can the global administrator be inform when another Global Administrators or a Authentication Administrators create a Temporary Access Pass for a user or a target group.

I've search in the compliance center and I cannot find a way to create a alert there.

1 Reply
Best you can do with the built-in tools is to create an alert for the "Update user." audit event type. To narrow it down just to TAP creation, you will have to use a tool with better filtering capabilities, i.e. export to Sentinel and configure an alert therein.