How To Configure Exchange Online Mailbox Audit Notifications

Purpose

How to configure ENow to monitor Exchange Online mailbox permission audit changes and notify a chosen group when they occur.

Procedure

1. On the ENow Management web server, open the ENow Admin Console.

   

2. Go to Server > Tuning Policy > General.

   

3. In the left-hand navigation pane, select Mailbox Permission Notification Settings.

   

4. Select Enable Exchange Online Mailbox Permission Audit to turn the feature on, then click Save.

   

5. Under Audit Event types, select the audit events you want to be notified about. All three can be selected.

   

6. Enter an individual email address, or use Add Azure Groups to select a group to notify when an audit event occurs.

   

7. If you are using a group, click Add Azure Groups. A window opens listing the available groups.

   

8. Highlight the group or groups you want and click OK.

   

9. The selected groups appear in the Email Address field. You can add further addresses manually — separate them with a semicolon.

   

10. Save the configuration.

What to expect

Once configured, the check runs every 60 minutes looking for the audit event types you selected. Notifications are not immediate — expect up to an hour between a permission change in the tenant and the alert arriving.