Configure alert notifications that are sent to MSSPs

Applies to:

• Microsoft Defender for Endpoint Plan 1
• Microsoft Defender for Endpoint Plan 2
• Microsoft Defender XDR

Want to experience Defender for Endpoint? Sign up for a free trial.

Note

This step can be done by either the MSSP customer or MSSP. MSSPs must be granted the appropriate permissions to configure this on behalf of the MSSP customer.

After access the portal is granted, alert notification rules can be created so that emails are sent to MSSPs when alerts associated with the tenant are created and set conditions are met.

For more information, see Create rules for alert notifications.

These check boxes must be checked:

• Include organization name - The customer name will be added to email notifications
• Include tenant-specific portal link - Alert link URL will have tenant specific parameter (tid=target_tenant_id) that allows direct access to target tenant portal

Related topics

• Grant MSSP access to the portal
• Access the MSSP customer portal
• Fetch alerts from customer tenant

Tip

Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.