Entra only logs admin operations, or sign-ins. Any "activity" performed by users will have to be logged by the corresponding application instead, for example most Microsoft 365 apps use the Unified audit log for that purpose: https://learn.microsoft.com/en-us/purview/audit-log-activities
How to get the user activity logs for applications connected with Entra ID?
Pratham Jagga
0
Reputation points
I am able to retrieve the last sign in times for applications for each user in my entra id using audit logs from the graph api, but can't find the logs of users's activity.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,130 questions
Microsoft Security | Microsoft Graph
13,724 questions
1 answer
Sort by: Most helpful
-
Vasil Michev 119.6K Reputation points MVP Volunteer Moderator
2025-01-02T16:36:12.7966667+00:00