Identify Microsoft Office 365 email users with Audit (Premium) licenses

Overview

The Microsoft Office 365 email connection monitors email attachments sent by users who have a subscription that includes Audit (Premium). To monitor email users with Code42, you can use the tools within your Microsoft environment to determine which users have Audit (Premium) and to modify user licensing as needed.

Affects

Microsoft Office 365 email users. Assign a subscription or license that includes Audit (Premium) to the users that you want to monitor with Code42.

View an individual user's licensing

1. Log in to your Microsoft 365 admin center using your Microsoft global administrator username and password.
2. Go to Users > Active users.
   The Active users list shows all active users in your environment. The license that each user has is listed under Licenses.
3. For more information on a specific user's licensing, click that user in the list.
4. When the details for that user appear, click the Licenses and apps tab.
   • In the Licenses section, verify that the user has either an E5 license or an add-on license that includes Audit (Premium). See the Microsoft documentation for more information about licenses that support Audit (Premium).
   • Expand the Apps section and verify that the Microsoft 365 Advanced Auditing checkbox is selected.

Export a list of users with Audit (Premium)

1. Log in to your Microsoft 365 admin center using your Microsoft global administrator username and password.
2. Go to Billing > Licenses.
3. Select a license that supports Audit (Premium) to list the users who have that license.
4. Click Export users to export that list to a CSV file. When the confirmation message appears, click Yes, export.
5. If needed, adjust user licensing to set up Audit (Premium) for the users you want to monitor with Code42.

External resources

Microsoft documentation:

• Auditing solutions in Microsoft Purview
• Microsoft Purview Audit (Premium)
• Set up Microsoft Purview Audit (Premium)

Related topics

• Allow Code42 access to Microsoft Office 365 email 
• Introduction to adding data connections 
• Data Connections reference 
• File event metadata reference