Help with the Audit alert powershell script to create custom alert policy when a user is granted send as or send on behalf permissions. RRS feed

  • Question

  • I tried setting a custom power-shell audit log policy to receive an alert when a user is given a send as or send on behalf permissions, using the script below but it does not seen to work.

    New-ActivityAlert -Name "Who grant Send As Permission" -Operation Add-RecipientPermission -NotifyUser emailtoreceivealert -Description "Notification for who grant send as permission"

    I had to result to powershell because there is no activity you can sent in the search criteria in Security and compliance audit log search to track when a user is given send as or send on behalf delegate permission.

    Thanks in advance.

    Monday, February 3, 2020 8:53 AM