Route notification and email alert sent to Admin Account (no mailbox for Admin accounts) to mail enabled id's.

Question

Hi Team,

As you know as per security best practices we are using Azure AD Admin ID's which are not having any mailbox to prevent any phishing attacks.

Now I want to know if we are using any such account how do we receive Azure AD alert and notification to our mailbox. I mean if we can get these alerts to our id's which are having mailboxes.

One more use case is if some password getting expire O365 send alert to user id 14 days before so can we configure or add our mail enabled id's so that we receive the notification on that id's.

Note: If I add mail attribute to Admin account than it might conflict with my mail enabled id.

Any suggestions here how to associate an exiting email id ( individual or DL group) to ADMIN Accounts to get notified for any Azure AD admin notifications sent to these ADMIN accounts e.g PIM notification / License renewal etc which are send out to Global admins who are not having any mailbox.

Answer 1

You will receive them on the alternative email you provide as part of the provisioning process/elevating a user.

There are no password expiration emails in Office 365, if you want to generate such, you have to use your own custom solution.

Answer 2

Doesnt work for us either, I don't want to licenses 365 for exchange just to get mail notifications for Azure Admin accounts when we are following best practise and not using admin accounts for email etc.

Alternative email only seems to get used when Microsoft want to send you a bill!

Answer 3

Microsoft needs to just add an option to send admin alerts/notifications to a distribution group.

Answer 4

Mail-enabled admin accounts is a bad practice. Microsoft needs to fix this.

https://github.com/cisagov/bad-practices/discussions/14

Answer 5

Is there a fix for this yet.