How to Set Up an Alert When a User Creates an Outlook Rule

Question

Hello,

I need assistance with setting up an alert to notify me (or the owner) whenever someone creates a new Outlook Rule in my organization

Specifically, I want to:

Trigger an alert when a user creates a forwarding rule or any type of rule in Outlook.

Receive an email notification whenever this event occurs, with details about the user who created the rule and the type of rule.

I have explored the Microsoft Purview Compliance Center and Audit Logs, but I'm unsure about how to configure an alert specifically for this activity. I would appreciate any guidance on:

The appropriate alert policy settings to track rule creation.

• If there's a built-in activity for tracking Outlook rule creation (e.g., forwarding rules).
• Any other methods to ensure I get notified via email when such rules are created.Specifically, I want to: Trigger an alert when a user creates a forwarding rule or any type of rule in Outlook.

  Receive an email notification whenever this event occurs, with details about the user who created the rule and the type of rule.
  

Answer 1

There is a built-in alert policy for this scenario, see for example this article: https://learn.microsoft.com/en-us/defender-xdr/alert-policies