Entra ID Audit Log Report

This guide will show an administrator how to view audited activities that have been captured by the Azure AD portal.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Compliance

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Viewing Audit Logs

  1. Navigate to the Audit Logs – Azure Active Directory portal, here you will find every logged event that has occurred within the Azure Active Directory Portal. From this page you can see the date and time of the occurrence, the service that has logged the occurrence, the category and name of the documented activity (what), and the status of the activity (success or failure). Filtering can be adjusted if you know specific information related to the event you are trying to explore.

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.