Shared mailbox notification

Question

Hello,

Currently, we have a system in place that notifies us via an email sent to our ticketing system whenever someone creates a rule in Outlook to forward emails. This was implemented to enhance security, as we have encountered issues with this in the past.

I was wondering if it is possible to set up something similar in Office 365, specifically to generate an alert that can be sent to a distribution list whenever someone's mailbox is shared with another user.

The problem we are encountering is that the owner (son) grants himself access to people's emails without anyone knowing, so we can't address it with the owner (dad). This person has admin access because their name is on the side of the building, but we would like to bring attention to this issue organically without directly confronting them. I have included a screenshot. thanks in advance for any help.

Answer 1

You can use activity alerts for that: https://learn.microsoft.com/en-us/purview/alert-policies

Select "Granted mailbox permissions" as the activity, and fill in the rest as needed. Do note that if you use any of the aggregate/threshold options, you will need an E5 or equivalent license.