Configuring alert policies

Microsoft Purview alert policies are used to generate and categorize alerts when users perform activities matching the alert policies you configure. Alert policies can be created by users with the Manage Alerts role or the Organization Configuration role. It can take up to 24 hours after you create an alert policy for alerts to start triggering from the policy.

Note

The more advanced features available with alert policies will require an E5 subscription, an E1 / E3 subscription with E5 compliance, or the E5 eDiscovery add-on. More information can be found in the links included at the end of the chapter.

Alert policies are made up of rules and conditions comprising the activity that will generate the alert.

To create an alert policy, complete the following steps:

1. Log in to the Microsoft Purview compliance portal at https://compliance.microsoft.com and navigate to Policies | Alert policies:

Figure 14.13: Alert...