Microsoft 365 – MAJOR UPDATE – Retirement of Alerts Policy cmdlets in Microsoft Purview Audit

Hi All,

Greetings for the day!!!

Today sharing one more MAJOR UPDATE related to Microsoft Purview.

MAJOR UPDATE : Microsoft is retiring Alert Policy CMDLETS in Microsoft Purview Audit.

Background

• Microsoft Purview previously offered the flexibility to create event alert policies through the Purview Audit solution.
• We can create an activity alerts. That will send us an email notification when users perform specific activities in Office 365.

Details

• On March 24, 2025, Microsoft will be retiring the event alerts feature within the Purview Audit solution. 
• With this change, any existing alert policies which had been created through the Audit solution will no longer generate alerts.
• Customers will no longer be allowed to create new alert policies through the Audit solution. 
• Starting March 24, 2025, support for the next CMDLETS will also be retired: 
  • Get-AuditConfigurationRule
  • New-AuditConfigurationRule
  • Remove-AuditConfigurationRule
  • Set-AuditConfigurationRule 

Alternative approach

• Any alert policies created through Purview DLP will continue to generate alerts as expected.
• Microsoft recommend that we use the alerts functionality within DLP.
• If we need to retain our existing alert policies then we need to create those through Purview DLP.

How I can see all my alert policies created using Purview audit

• We have an option of PowerShell CMDLET – Get-AuditConfigurationRule – This CMDLET will be available till March, 24, 2025.

REFERENCES

• Get-AuditConfigurationRule – https://learn.microsoft.com/en-us/powershell/module/exchange/get-auditconfigurationrule?view=exchange-ps

Thank you for your support, will catch up with new article soon.

Keep learning and keep smiling 🙂 LIFE IS BEAUTIFUL 🙂