How to monitor/get the email alerts of Service accounts being used/someone tried to login to that account in M365 via Cloud app security policy alerts or any other way as I saw blogs but it was not clear to me?

Question

How to monitor/get the email alerts of Service accounts being used/someone tried to login to that account in M365 via Cloud app security policy alerts or any other way as I saw blogs but it was not clear to me?

Vinod Survase 4,786

James Hamil 27,221 Reputation points Microsoft Employee Moderator

2023-09-14T18:38:37.1333333+00:00

Hi @Vinod Survase , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?

Thank you,

James
Shweta Mathur 30,301 Reputation points Microsoft Employee Moderator

2023-09-15T11:52:03.03+00:00

Hi @Vinod Survase ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Accepted answer

0 additional answers

Your answer

James Hamil 27,221 Reputation points Microsoft Employee Moderator

2023-09-14T18:38:37.1333333+00:00

Hi @Vinod Survase , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?

Thank you,

James
Shweta Mathur 30,301 Reputation points Microsoft Employee Moderator

2023-09-15T11:52:03.03+00:00

Hi @Vinod Survase ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Hi @Vinod Survase , you can use Azure AD sign-in logs. You can export these logs to a security information and event management (SIEM) tool, such as Microsoft Sentinel, to build alerts and dashboards.

To set up email alerts, follow these steps:

Go to the Azure portal and select the Cloud Service (extended support) deployment you want to enable alerts for.
Select the Alerts blade.
Click the New Alert icon.
Input the desired conditions and required actions based on the metrics you are interested in tracking. You can define the rules based on individual metrics or the activity log.
Configure the alert conditions, actions, and details as needed.
Save the changes, and you will begin to see the Alerts blade populate over time based on the configured metrics.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James

Vinod Survase 4,786 Reputation points

2023-09-16T06:53:35.4966667+00:00

Thanks James Hamil

Its helpful.

Share via

How to monitor/get the email alerts of Service accounts being used/someone tried to login to that account in M365 via Cloud app security policy alerts or any other way as I saw blogs but it was not clear to me?

0 additional answers

Your answer