Hello all, as we are working to bring you the best advanced audit capabilities, we would appreciate it if you can complete this form: aka.ms/AdvancedAudit
@Mavi Etzyon-Grizer has anyone reported the bug with Advanced Audit where the mailitemsaccessed audit event is only recorded if the E5 license is directly assigned to the user? It does not get added if Azure AD Premium's "Group based licensing" is used to deploy E5.
I documented this behavior (scroll down to the 'troubleshooting' section of this post)
