SOLVED
Home

Advanced security alerts and licensing requirements

%3CLINGO-SUB%20id%3D%22lingo-sub-62437%22%20slang%3D%22en-US%22%3EAdvanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62437%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%202500%20users%20with%20an%20E3%20license%20and%20500%20users%20with%20an%20E5%20license.%20If%20I%20set%20an%20Advanced%20Alert%20(which%20requires%20E5)%20alert%20in%20the%20Security%20and%20Compliance%20center%20that%20alerts%20me%20if%205%20users%20are%20deleted%20within%205%20minutes%20(or%20something%20similar)%2C%20then%20will%20I%20be%20alerted%20regardless%20of%20the%20licenses%20associated%20with%20the%20deleted%20users%2C%20or%20will%20it%20only%20tell%20me%20about%20deletion%20to%20those%20users%20with%20E5%20licenses%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62959%22%20slang%3D%22en-US%22%3ERe%3A%20Advanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62959%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62858%22%20slang%3D%22en-US%22%3ERe%3A%20Advanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62858%22%20slang%3D%22en-US%22%3E%3CP%3ERight%2C%20my%20bad.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62795%22%20slang%3D%22en-US%22%3ERe%3A%20Advanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62795%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Vasil%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAdvanced%20Security%20Management%20licensing%20is%20such%20that%20you%20need%20one%20license%20per%20user%20that%20you%20are%20going%20to%20protect%20with%20activity%20and%20anomaly%20detection%20policies.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Lavanya Murthy
Occasional Contributor

I have 2500 users with an E3 license and 500 users with an E5 license. If I set an Advanced Alert (which requires E5) alert in the Security and Compliance center that alerts me if 5 users are deleted within 5 minutes (or something similar), then will I be alerted regardless of the licenses associated with the deleted users, or will it only tell me about deletion to those users with E5 licenses?

 

Thanks

3 Replies
Solution

Hi Vasil,

 

Advanced Security Management licensing is such that you need one license per user that you are going to protect with activity and anomaly detection policies.

Right, my bad.

Related Conversations
Windows Server 2016 Security and Editions
Kurt Mackie in Windows Server AMA on
2 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Question regarding Azure AD license
Marcos95 in Azure Active Directory on
7 Replies
Alerting on Heartbeat issue
Scott Allison in Azure Log Analytics on
4 Replies
A1 Plus?
Tony Derricott in Office 365 on
4 Replies
Join Our Security Community
Ryan Heffernan in Security, Privacy & Compliance on
2 Replies