Azure active directory -> User at risky detected

Question

Dear Team,

just to ask is there is a option recieving email about risky users to be able to see from the incomming alert (msg) which user, name and email and not to click -> view detailed report to see details about this user

Thank you in advance,
Best Regards
Nikola

Answer 1

Hello Lubenov, Nikola Anri

Yes, in Azure Active Directory (Azure AD), there is an option to receive email alerts about risky sign-ins and risky users. When you receive an alert email, you can view some details about the user directly in the email without having to click "View Detailed Report".

The email alert typically includes the following information about the user:

1. Name
2. Email address
3. Date and time of the risky sign-in or activity
4. Type of risk detected (e.g., impossible travel, suspicious activity)
5. Severity of the risk (low, medium, high)
6. Location of the sign-in or activity (e.g., country, IP address)

However, the level of detail in the email alert may depend on your specific Azure AD configuration and the settings you have enabled for risk detection and notification.

Answer 2

Answer 3

Hi again,

just forgot to mention that under "users at risk detect" is only the option available to add email adress for notification and not to edit or modify for example -> receive an alert email and be able to view some details about the user directly