About Audit Log's <scope>

Question

Hi All!

When I grant a user permission then I found the below audit log.

=======

<roleid>1073741830</roleid><principalid>24</principalid><scope>3385278E-DF2F-484E-9FA6-E1CF89D5AF1F</scope><operation>ensure added</operation>

=======

I want to know what's the <scope>'s ID:3385278E-DF2F-484E-9FA6-E1CF89D5AF1F meaning?

I thank the Scope is the  operation that where I have granted the user permission. (eg. list, site  or sitecollection )

Then I searched the TechNet forum and I found the below answer.

---

https://social.technet.microsoft.com/Forums/en-US/ef0c4d43-15d0-434d-93af-2041f0d39cfe/how-to-understand-the-audit-log?forum=sharepointgeneralprevious

---

Scope: Is the scope where this change is effective

So I think my thought is right the change is effective on my site collcetion. The scope ID:3385278E-DF2F-484E-9FA6-E1CF89D5AF1F should be the sitecollection ID,because I grantted the user permission in site collection level.

But I found that the Scope's ID isn't equal  to the real site collcetion ID. And I think I have found everywhere in the site colleciton to found the Scope's ID by 【SharePoint Manager 2013 Online】but I didnot found the scope ID: 3385278E-DF2F-484E-9FA6-E1CF89D5AF1F 's location.

※The real site collection's ID is in above which is 603516ca.............

So I want to know where is the scope id. And what is the <scope>'s real meaning.

I want to get a detailed answer.

Thanks.

Tobey

Answer 1

Hi Tobey2017,

Scope in the audit log does not refer to the site collection ID. Instead, it refers to the SP permission.

For the detailed information, you can refer to the article below,

especially the SharePoint permissions scope system overview part:

Fine-grained permission reference for SharePoint Server 2013.

Regards,

Cherry

Answer 2

Hi Tobey2017,

Have you checked the information above?

Please feel free to let us know the result.

Thanks,

Cherry