...
The Exporter and Approvers can be copies of accounts for the purpose of SIEM operations. For instance, a secondary of an email address may be invited to the organization, claimed, and used as a service account. If your email provider supports external-facing alias addresses, then that address may be invited to the organization as a service account in your SIEM connector.
Changing the Exporter and Approvers
Changing the Exporter and Approvers is possible but require reset of the SIEM configuration file and the user keys on the server. This may involve recreating an approval group and does require clearing the SIEM server’s local database and redoing the key copying. For this reason, we advise to choose active and reliable users in the organization and considering the configuration permanent.