This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 34%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENR%3C/text%3E%3C/svg%3E)
Hi,
In the Azure portal, when navigating to Audit Logs and selecting the activity named 'Change user license' (reference image attached), clicking on any event displays the audit log details. However, the Modified Properties section does not show any values for the old and new values.
While we can see values in the Additional Details section, these appear to be truncated.
Could you please assist in retrieving the old and new values under the Modified Properties for the Change User License activity?
Reference images are attached for your convenience.
Thank you for your time and assistance.
Usually, you would find a matching "Update user" event, which should contain the details of the SKUs modified.
Hi,
Thank you for your timely reply.
As suggested, we referred to the 'Update user' event, but it also does not contain any modified properties. Additionally, the details shown in the Additional Details section appear truncated.
Reference image is attached for your review.
Thank you.
Yes, you should have multiple of those "truncated" events ("seq" seems to indicate the sequence number and "c" the total number), but also a "merged" event listing all of them together. In other words, ignore any event with "b"/"c"/"seq" keys and look for the merged one that's usually generated few seconds later.
This applies to both "Update user" and "Change user license" events, use the former if you are not able to find any "merged" Change user license event.