How to retrieve audit log events for SharePoint Plans using Graph Purview API (beta)

Question

I have a requirement where I need to verify if a Plan gets created, a Task gets added to said plan, a Task gets deleted and a Task gets assigned.

I am attempting to do this using the Purview API (via Graph API) but am not getting any responses with regards to

• TaskRead
• TaskCreated
• TaskModified
• TaskDeleted
• TaskAssigned

I create an audit log query, after the query has succeeded I retrieve the records and I do not see any in relation to the Plan (even thought I create Plan with Tasks during the specified time period in the auditLogQuery.

Here https://learn.microsoft.com/en-us/purview/audit-log-activities#microsoft-project-for-the-web-activities

It talks about Microsoft Project. I am a bit confused as to what service to call/use to get these audit logs.

Answer 1

Hi @eggy mcegg,

Thank you for posting in this community.

Unfortunately, there is no Api in Graph Api about retrieving audit log events for SharePoint plans.

However, you can log in to the Microsoft compliance portal to get audit log events for SharePoint Plans.

• Go to https://compliance.microsoft.com and sign into the Microsoft compliance portal. 
• Select Audit

• Start a new search in the unified audit log.

This auditing capabilities capture activities in Planner that include read, created, modified, copied or deleted for a plan, task or roster, and also, capture record types such as PlannerTask, PlannerPlan PlannerCopyPlan. Since SharePoint Plans are implemented using Microsoft Planner, it is also included.

You can review the full list of Planner user and admin activities logged for auditing and the Planner schema. 

Reference: Auditing capabilities coming to Microsoft Project, Microsoft Planner, and Microsoft To Do

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.