Configure Email Notifications for Administrative Permissions in Exchange Online | Microsoft 365 Security Administration

Configure Email Notifications for Administrative Permissions

Prev Question Next Question

Question

You are the IT administrator of an organization with a Microsoft 365 subscription.

You need to be notified by email whenever someone is assigned administrative permissions in your Exchange Online organization.

How would you configure this from the Security & Compliance admin center?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: D

You need to create an alert policy for Elevation of Exchange admin privilege.

When enabled the policy generates an alert when someone is assigned administrative permissions in your Exchange Online organization.

For example, when a user is added to the Organization Management role group in Exchange Online.

Role group name eDiscovery Manager Description Edit Perform searches and place holds on mailboxes, SharePoint Online sites, and OneDrive for Business locations. Assigned roles Export RMS Decrypt Custodian Communication Review Preview Compliance Search Case Management Hold
The following table lists the eDiscovery-related RBAC roles in the Microsoft 365 compliance center, ant groups that each role is assigned to by default. Role eDiscovery Manager & Organization Reviewer Administrator Management Case y v v Management ‘Communication v ‘Compliance y v v Search Custodian v Export v Hold y v v

Since the answer is given in the documentation, the other options are incorrect.

To know more about alert policies, please refer to the link below:

The correct answer to the question is D. From Alerts, create an alert policy.

To configure an email notification for assigning administrative permissions in Exchange Online organization, you need to create an alert policy in the Security & Compliance admin center. Here are the steps to create an alert policy:

  1. Go to the Microsoft 365 Security & Compliance admin center and sign in with your credentials.
  2. Click on Alerts from the left navigation menu.
  3. Click on the New alert policy button at the top.
  4. In the New alert policy window, enter a name and description for the alert policy.
  5. Under the Activity section, click on the Select activity dropdown and select Admin roles assignment.
  6. Under the Trigger section, select how you want to trigger the alert. You can choose from the following options:
    • Any user
    • Specific users or groups
    • Specific roles or permissions
  7. Under the Actions section, select how you want to receive the alert. You can choose from the following options:
    • Send email to
    • Send email to service account
    • Send push notification
    • Send SMS message
  8. Enter the email address(es) of the recipient(s) in the Send email to field.
  9. Click on the Save button to create the alert policy.

Once the alert policy is created, you will receive an email notification whenever someone is assigned administrative permissions in your Exchange Online organization.

Prev Question Next Question