How to get the user activity logs for applications connected with Entra ID?

Pratham Jagga 0 Reputation points
2025-01-02T13:03:23.4166667+00:00

I am able to retrieve the last sign in times for applications for each user in my entra id using audit logs from the graph api, but can't find the logs of users's activity.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 119.6K Reputation points MVP Volunteer Moderator
    2025-01-02T16:36:12.7966667+00:00

    Entra only logs admin operations, or sign-ins. Any "activity" performed by users will have to be logged by the corresponding application instead, for example most Microsoft 365 apps use the Unified audit log for that purpose: https://learn.microsoft.com/en-us/purview/audit-log-activities

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.