How to Get Alerts When a New Microsoft 365 User Is Created
Question details
Microsoft 365 administrators need a way to receive automated notifications whenever a new user account is created in their organization.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Tracking and auditing user account creation to maintain security, oversight, and compliance.
- Observed behavior
- Administrators want the system to automatically send an email alert when a new user is added to the directory.
Ensure you have the necessary administrative privileges, such as the Compliance Administrator or Security Administrator role, to access the Microsoft Purview compliance portal and create custom alert policies.
Create a User Creation Alert Policy in Microsoft Purview
Configure a custom alert policy in the Microsoft Purview compliance portal to automatically trigger an email notification whenever a new user account is created.
By setting up an alert policy, administrators can monitor specific activities across their tenant. The alert triggers based on audit log events when an account is provisioned.
Sign in to the Microsoft Purview compliance portal using your Microsoft 365 administrator credentials.
In the left navigation pane, expand 'Policies', select 'Alert', and then click on 'Alert policies'.
Click on the 'New alert policy' button. Enter a descriptive name (e.g., 'New User Account Created') and a brief description, then click 'Next'.
Choose an appropriate severity level. Under the 'Activity is' dropdown, search for and select 'Created user' or the specific Azure Active Directory event corresponding to user creation.
Specify the email addresses of the administrators or security team members who should receive notifications when the alert is triggered.
Review your policy settings. Ensure the 'Turn on policy right away' option is selected, and click 'Submit' to activate the alert policy.
Looking for a Secure and Free Alternative to Microsoft Office?
While Microsoft 365 provides extensive administrative and compliance tools, managing its complexity and subscription costs can be challenging for some teams. If you need a reliable, lightweight, and cost-effective productivity suite, consider WPS Office. It provides powerful document creation and editing tools with full compatibility for all major Office formats without the hefty subscription fees.
Frequently Asked Questions
Who has permission to create alert policies in Microsoft 365?
Only users assigned to the Compliance Administrator, Organization Management, or Security Administrator role groups can create and manage alert policies in the Microsoft Purview portal.
Why am I not receiving email notifications for newly created users?
This can happen if the alert policy is turned off, if your email address is missing from the designated recipients list, or if the policy hasn't fully propagated yet (which can take up to 24 hours after creation).
Does the email notification show who created the new user?
Yes, when an alert notification is triggered, the email details and the Purview alert dashboard will display the specific administrator or automated service account that initiated the user creation event.
Are Microsoft Purview alert policies available for all Microsoft 365 subscription plans?
Advanced alert policies are generally available for enterprise plans like E3 and E5. While some basic alert functionality is available in business plans, comprehensive compliance features may require specific Microsoft 365 licensing.
