Policies

    To monitor user activities and changes within your Microsoft 365 tenants, you need to create policies based on your organization’s governance. By adding rules to a policy and assigning the policy to a scope, the corresponding actions and changes within the scope will be monitored. Policies can be managed on a service level to only monitor the objects in a specific object type within a limited scope, or they can be managed on a tenant level to monitor objects in the entire tenant.

    Each policy displays a corresponding object type icon, representing the object type for which the policy is created.

    Policy LevelObject TypeIcon
    Service levelSharePoint siteButton: SharePoint Sites
    Service levelOneDriveButton: OneDrive
    Service levelMicrosoft 365 GroupButton: Microsoft 365 Groups
    Service levelMicrosoft TeamButton: Microsoft Teams
    Service levelMicrosoft 365 userButton: Microsoft 365 Users
    Service levelExchange mailboxExchange Mailboxes
    Service levelSecurity and distribution groupButton: Security and Distribution Groups
    Tenant levelTenantIcon: object type

    Each policy displays its corresponding status, representing the status which the policy is in now.

    StatusDescription
    DraftPolicy is currently in draft status and can be published and executed once finalized.
    PublishedPolicy is scheduled and ready, waiting for the execution based on the configured schedule.
    RunningPolicy is running currently to scan the assigned scope.