Hello,
Is this a normal alert?
You're getting this message because there's activity in your Office 365 organization that matches the alert 'Mailbox Access'.Activity: Add-MailboxPermission User: NT AUTHORITY\SYSTEM (Microsoft.Exchange.ServiceHost)Item: EURPR08A006.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations///mydomain.onmicrosoft.com/DiscoverySearchMailbox{D919BA05-46A6-415f-80AD-7E09334BB852}Time of activity (UTC): 12/27/2019 4:11:24 PM
What's Next?
- Search the audit log for this user
- Search the audit log for this item
- Search the audit log for this activity
- Search the audit log for other activities that would trigger this alert
Regards