If you're having trouble at any stage please contact us at support@skyformation.com.

Preface

Please see below the different Office 365 subscriptions needed for each of the audit sources (aka endpoints) supported by the SkyFormation Office 365 Cloud Connector.

In case your Office 365 subscription does not support the endpoint you will not be able to get the events detailed in the SkyFormation Office 365 Cloud Connector guide.

Subscription needed

Endpoint	Minimum Office365 Subscription	Notes
signins-events	AAD Premium P2	Any subscription level could buy the AAD Premium P2 in addition
management-sharepoint	No Mimimum
management-general	No Mimimum
management-exchange	No Mimimum
management-active-directory	No Mimimum
management-dlp	E3
graph-identity-protection-unfamiliar-location	E3
graph-identity-protection-suspicious-ip	E3
graph-identity-protection-malware	E3
graph-identity-protection-leaked-credentials	E3
graph-identity-protection-impossible-travel	E3
graph-identity-protection-anomalous-ip	E3
exchange-admin-reports-message-trace	No Mimimum
exchange-admin-reports-spoof-mail-report	E3
exchange-admin-reports-mail-detail-spam	E3
exchange-admin-reports-mail-detail-malware	E3
exchange-admin-reports-mail-detail-dlp-policy	E3
audit-events	No Mimimum

Articles in this section

Office 365 Minimal Subscription Requirements Per Endpoint

Preface

Subscription needed

Comments

Articles in this section

Preface

Subscription needed

Related articles