What is a one sentence summary of your feature request?
Searching only Domain Admin account enabled/disabled
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
It is not possible to receive alerts if a Domain Admin account has been enabled or disabled because there is no operator for the “What” field, i.e., the enabled/disabled account.
Currently, the “In group” operator is only available for the “Who” field.
It would be useful to have the same operator for the “What” field as well.
How do you currently solve the challenges you have by not having this feature?
No workarounds are available