SOLVED
Home

Advanced security alerts and licensing requirements

%3CLINGO-SUB%20id%3D%22lingo-sub-62437%22%20slang%3D%22en-US%22%3EAdvanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62437%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%202500%20users%20with%20an%20E3%20license%20and%20500%20users%20with%20an%20E5%20license.%20If%20I%20set%20an%20Advanced%20Alert%20(which%20requires%20E5)%20alert%20in%20the%20Security%20and%20Compliance%20center%20that%20alerts%20me%20if%205%20users%20are%20deleted%20within%205%20minutes%20(or%20something%20similar)%2C%20then%20will%20I%20be%20alerted%20regardless%20of%20the%20licenses%20associated%20with%20the%20deleted%20users%2C%20or%20will%20it%20only%20tell%20me%20about%20deletion%20to%20those%20users%20with%20E5%20licenses%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62959%22%20slang%3D%22en-US%22%3ERe%3A%20Advanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62959%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62858%22%20slang%3D%22en-US%22%3ERe%3A%20Advanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62858%22%20slang%3D%22en-US%22%3E%3CP%3ERight%2C%20my%20bad.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-62795%22%20slang%3D%22en-US%22%3ERe%3A%20Advanced%20security%20alerts%20and%20licensing%20requirements%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-62795%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Vasil%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAdvanced%20Security%20Management%20licensing%20is%20such%20that%20you%20need%20one%20license%20per%20user%20that%20you%20are%20going%20to%20protect%20with%20activity%20and%20anomaly%20detection%20policies.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I have 2500 users with an E3 license and 500 users with an E5 license. If I set an Advanced Alert (which requires E5) alert in the Security and Compliance center that alerts me if 5 users are deleted within 5 minutes (or something similar), then will I be alerted regardless of the licenses associated with the deleted users, or will it only tell me about deletion to those users with E5 licenses?

 

Thanks

3 Replies
Solution

Hi Vasil,

 

Advanced Security Management licensing is such that you need one license per user that you are going to protect with activity and anomaly detection policies.

Highlighted

Right, my bad.

Highlighted