Office 365 Advanced Security Management is available in Office 365 Enterprise E5 or as an add-on for another Office 365 Enterprise subscription. If you are a global administrator or security administrator, you turn on Advanced Security Management in the Security & Compliance Center.
Tip: To view or add to your subscription, as a global admin, sign in to Office 365, and then choose Admin > Billing. For more information about plan options, see Compare All Office 365 for Business Plans.
Turn on Advanced Security Management
You must be a global administrator or security administrator to perform these steps.
Go to https://protection.office.com and sign in using your work or school account for Office 365. (This takes you to the Security & Compliance Center.)
Go to Alerts > Manage advanced alerts.
Select Turn on Advanced Security Management for Office 365.
Choose Go to Advanced Security Management to go to the Advanced Security Management portal, where you can view reports and create or edit your policies.
Note: When you turn on Advanced Security Management, auditing information about your Office 365 user accounts and user activities is transferred to the Cloud App Security. This allows Office 365 to provide advanced alerts, filtering, and other features so you can get information and take action about suspicious activities.