Take Advantage of New Exchange and SharePoint Audit logs for Standard Users

  • Post author:
  • Post category:News
  • Post last modified:October 20, 2023
  • Reading time:2 mins read

Microsoft has historically been quite protective over the accessibility of their detailed audit logs in Microsoft Purview, especially for audit logs that are notably useful for admins attempting to conduct thorough investigations. 

Now, Microsoft is expanding the availability of the following 4 audit logs to standard users, where they were previously only accessible to Microsoft Purview premium users:

  1. MailItemsAccessed
  2. Send
  3. SearchQueryInitiatedExchange
  4. SearchQueryInitiatedSharePoint

Standard Microsoft Purview users will be able to access these items while they are in preview, beginning June 2024 and the rollout of the logs in GA will start in September 2024.

To access the Microsoft Purview Audit log, follow the below steps:

  1. Login to https://compliance.microsoft.com/
  2. Under Solutions, select Audit.
  3. Use the New Search tab to conduct a search.

You can use the Activities – friendly names tab to conduct a meaningful search for the activities you want to investigate. For example, to find Send (currently premium, soon to be free) activities, search for Sent message.

Purview Send Activity
Purview Send Activity

Information from the Microsoft 365 Roadmap

Microsoft 365 Roadmap | Microsoft 365 Feature ID: 182259

  • Feature ID182259
  • Added to roadmap10/18/2023
  • Product(s)Microsoft Purview compliance portal
  • Cloud instance(s)Worldwide (Standard Multi-Tenant), GCC High, DoD, GCC
  • Platform(s)Web
  • Release phase(s)General Availability, Preview

Daniel Bradley

My name is Daniel Bradley and I work with Microsoft 365 and Azure as an Engineer and Consultant. I enjoy writing technical content for you and engaging with the community. All opinions are my own.

Leave a Reply