Merge pull request MicrosoftDocs#5980 from dariomws/patch-178

Added a note about ElevationOfPrivilege retirement in New-ActivityAlert.md

Author: chrisda

exchange/exchange-ps/exchange/New-ActivityAlert.md

@@ -38,21 +38,6 @@ New-ActivityAlert -Multiplier <Double> -Name <String> -NotifyUser <MultiValuedPr
  [-WhatIf] [<CommonParameters>]
 ```
 
-### Default
-```
-New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> -Operation <MultiValuedProperty> [-Type <AlertType>]
- [-Category <AlertRuleCategory>]
- [-Confirm]
- [-Description <String>]
- [-Disabled <Boolean>]
- [-DomainController <Fqdn>]
- [-EmailCulture <CultureInfo>]
- [-RecordType <AuditRecordType>]
- [-Severity <RuleSeverity>]
- [-UserId <MultiValuedProperty>]
- [-WhatIf] [<CommonParameters>]
-```
-
 ### SimpleAggregationAuditAlert
 ```
 New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> [-Operation <MultiValuedProperty>] -Threshold <Int32> -TimeWindow <Int32> -Type <AlertType>
@@ -70,9 +55,9 @@ New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> [-Operation <
  [-WhatIf] [<CommonParameters>]
 ```
 
-### ElevationOfPrivilegeAuditAlert
+### Default
 ```
-New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> -Type <AlertType>
+New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> -Operation <MultiValuedProperty> [-Type <AlertType>]
  [-Category <AlertRuleCategory>]
  [-Confirm]
  [-Description <String>]
@@ -235,7 +220,7 @@ The Type parameter specifies the type alert. Valid values are:
 
 - Custom: An alert is created for the activities you specify with the Operation parameter. Typically, you don't need to use this value (if you don't use the Type parameter, and you specify the activities with the Operations parameter, the value Custom is automatically added to the Type property).
 
-- ElevationOfPrivilege: An alert is created for a predefined list of elevation of privilege activities (Operation parameter values). The activities are Add-RoleGroupMember, New-ManagementRoleAssignment, Add member to role., Update-RoleGroupMember, New-RoleGroup, Set-RoleGroup, Set-Mailbox, and Set-ManagementRoleEntry. You can't use the Operation parameter when you use the ElevationOfPrivilege value (on the New-ActivityAlert or Set-ActivityAlert cmdlets).
+- ElevationOfPrivilege: This value is being retired.
 
 - SimpleAggregation: An alert is created based on the activities defined by the Operation and Condition parameters, the number of activities specified by the Threshold parameter, and the time period specified by the TimeWindow parameter.
 
@@ -245,7 +230,7 @@ Note: You can't change the Type value in an existing activity alert.
 
 ```yaml
 Type: AlertType
-Parameter Sets: AnomalousOperationAuditAlert, SimpleAggregationAuditAlert, ElevationOfPrivilegeAuditAlert
+Parameter Sets: AnomalousOperationAuditAlert, SimpleAggregationAuditAlert
 Aliases:
 Applicable: Office 365 Security & Compliance Center