Protection on Accounts

[nickysunny]

Hi,

I have a couple of accounts created as User accounts however, they are purely used to access emails. These accounts are used by different departments and used for accessing emails from outside organisation. The challenge I cannot convert the account to shared mailbox as users access the email on the web periodically.

Requirements:

- How to secure account if cannot configure MFA as used by various users.

-What license can I assign to have protection like User/sign risk etc

- Currently has O365 E1 license and want to restrict only to have access emails nothing else.

[#2 · Accepted solution]

Not sure which license posture you've got. But I would consider Intune enrollment to be able to use the device state for being compliant. You can require the devices to be compliant and/or hybrid Azure AD joined using conditional access. For additional security I would use Defender for Cloud Apps too (session and access policies).

For premium risk-based policies/detections you need Azure AD P2.