This module is meant to configure how Office Protect monitors your tenant. Monitoring records all real-time activities for your Microsoft 365 tenant and generates events for suspicious activities that will be sent through email.
Monitor Profile
You can set up your tenant quickly by selecting a Profile suiting your organization's needs. You can also review each event individually and create a custom profile that suits the organization’s specific needs.
Profiles do not support setting customizations in Sign-In from Unauthorized Country’s list of authorized countries and Too Many Logins event configuration.
To create a Profile, simply select make your change into the Monitor Page and click on Save and Apply.
Office Protect will ask you if you want to create a custom Profile. Select Yes and name your profile
The new profile will then be available for all your organizations in Office Protect for you to reuse in the Select Profile section at the top of the Monitor page
Manage Monitor Notifications and Recipients
Office Protect has two types of notifications: Alerts and Digests.
- Alerts: Events that are sent as they happen and are meant to be things with immediate security impact for your tenant.
- Digest: Aggregation of recent events sent at regular intervals, every 7 days. All events will be accessible in the report section. If there are no events recorded within the timeframe, no report will be sent.
Both these events are also recorded in the Report section. See Report Section
You can configure the email recipients for each type of notification; simply add the desired email and click on Save Setting. This configuration can be found at the very bottom of the Monitor page.