Flow or Alert on View/Open of file in SharePoint Online

%3CLINGO-SUB%20id%3D%22lingo-sub-427937%22%20slang%3D%22en-US%22%3EFlow%20or%20Alert%20on%20View%2FOpen%20of%20file%20in%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-427937%22%20slang%3D%22en-US%22%3E%3CP%3ESituation%3A%20have%20a%20site%20that%20is%20for%20top%20management.%26nbsp%3B%20They%20want%20a%20completely%20closed%20document%20storage%20area.%26nbsp%3B%20Problem%20is%20system%20admin%20IT%20will%20always%20have%20the%20ability%20to%20access%20the%20documents%20if%20they%20desire.%26nbsp%3B%20Is%20there%20a%20way%20to%20set%20a%20flow%20or%20an%20alert%20that%20can%20notify%20our%20top%20management%20group%20when%20someone%20views%20or%20opens%20a%20file%20in%20their%20library%3F%26nbsp%3B%20I%20know%20we%20can%20alert%2Fflow%20on%20change%20and%20download%2C%20but%20don't%20see%20that%20ability%20on%20just%20opening.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-427937%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EFlow%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-428371%22%20slang%3D%22en-US%22%3ERe%3A%20Flow%20or%20Alert%20on%20View%2FOpen%20of%20file%20in%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-428371%22%20slang%3D%22en-US%22%3E%3CP%3ENot%20sure%20what%20your%20license%20level%20is%2C%20but%20you%20should%20take%20a%20look%20at%20Alerts%20under%20Office%20365%20Security%20%26amp%3B%20Compliance.%20%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%2Falertpolicies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%2Falertpolicies%3C%2FA%3E%3CBR%20%2F%3EYou%20can%20configure%20Alerts%20for%20file%20access%20and%20target%20it%20to%20specific%20site%20collections.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-428538%22%20slang%3D%22en-US%22%3ERe%3A%20Flow%20or%20Alert%20on%20View%2FOpen%20of%20file%20in%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-428538%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318519%22%20target%3D%22_blank%22%3E%40KCMFCC%3C%2FA%3EIn%20addition%20to%20the%20Alerts%20in%20the%20Security%20and%20Compliance%20Center%2C%20you%20can%20set%20very%20advanced%20monitoring%20policies%20in%20Cloud%20App%20Security.%20You%20may%20also%20want%20to%20implement%20Azure%20Information%20Protection%20and%20Data%20Loss%20Prevention%20policies%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-428638%22%20slang%3D%22en-US%22%3ERe%3A%20Flow%20or%20Alert%20on%20View%2FOpen%20of%20file%20in%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-428638%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20way%20setup%20an%20alert%20by%20the%20user.%26nbsp%3B%20The%20options%20advised%20are%20possible%2C%20but%20administered%20by%20IT.%26nbsp%3B%20IT%20can%20always%20turn%20off%20an%20alert%20and%20turn%20it%20back%20on.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-428784%22%20slang%3D%22en-US%22%3ERe%3A%20Flow%20or%20Alert%20on%20View%2FOpen%20of%20file%20in%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-428784%22%20slang%3D%22en-US%22%3Eif%20you%20assign%20different%20IT%20people%20to%20different%20roles%2C%20they%20can%20monitor%20one%20another.%3CBR%20%2F%3EYou%20can%20use%20Azure%20Privileged%20Identity%20Management%20to%20required%20IT%20staff%20to%20request%20permission%20when%20they%20want%20to%20perform%20a%20task%20that%20requires%20an%20Admin%20Role%3C%2FLINGO-BODY%3E
Occasional Contributor

Situation: have a site that is for top management.  They want a completely closed document storage area.  Problem is system admin IT will always have the ability to access the documents if they desire.  Is there a way to set a flow or an alert that can notify our top management group when someone views or opens a file in their library?  I know we can alert/flow on change and download, but don't see that ability on just opening.

5 Replies

Not sure what your license level is, but you should take a look at Alerts under Office 365 Security & Compliance. https://protection.office.com/alertpolicies
You can configure Alerts for file access and target it to specific site collections.

@KCMFCCIn addition to the Alerts in the Security and Compliance Center, you can set very advanced monitoring policies in Cloud App Security. You may also want to implement Azure Information Protection and Data Loss Prevention policies

Is there a way setup an alert by the user.  The options advised are possible, but administered by IT.  IT can always turn off an alert and turn it back on.  

if you assign different IT people to different roles, they can monitor one another.
You can use Azure Privileged Identity Management to required IT staff to request permission when they want to perform a task that requires an Admin Role
All of which can be circumvented by Global Admins.
In short, you need to trust your Global Admins and then look at PIM/PAM solutions.