List of activities to monitor. For example, activities can include
Join, or more. You can include multiple activities in a rule.
List of accessible applications to scan. By default, all cloud apps you added to SaaS Security API are scanned, but you can restrict scans to specific apps.
Count and Frequency
The count and frequency of the activity that will trigger a policy violation. For example, ten (or more) times a week, or two (or more) times per day.
Users whose perform the activities. By default, all users in all domains are included. Alternatively, you can:
Typeof target for the user activity. For example, a target could be any user activity that impacts a
Super Admin(target name)
Password(target type). Or, any user activity associated with a
Client List(target name)
Add a Targetto include multiple targets in a policy rule. For example, activities that add
Teams(target), or activities that share
Users(target) would include two targets in the rule.
The location where the activity occurs. Choices include:
The IP address where the activity was initiated. Choices include:
Use commas to separate multiple IP addresses.