Alert policies

Within Microsoft 365 environments with Exchange Online mailboxes, alert policies play a pivotal role by triggering notifications on the alert dashboard based on user actions that meet the policy’s predefined rules and conditions. Each alert policy encapsulates a series of rules and criteria outlining the specific actions by users or administrators that lead to an alert, identifies who among the users activates the alert upon engaging in the specified activity, and sets a threshold for the frequency of the activity required to initiate an alert. Actions such as granting administrative rights in Exchange Online, encountering malware threats, phishing maneuvers, or unusual patterns of file deletion and external sharing can all prompt alerts. These policies empower you to organize the generated alerts, implement the policy across all organizational users, establish a threshold for alert activation, and choose whether to activate email notifications upon alerts. With...