Licensing requirements for retrieving universal audit log data with Office 365 Management API

Anonymous
2023-08-03T21:38:44+00:00

I'm attempting to implement a solution like is described in this documentation article but I'm having trouble determining the minimum licensing required to access the universal audit logs with the management API. It seems like audit logs are available for any 365 license, but there's a portion that links to this article which talks only about the premium audit logs (E5 licensing or better, not E3) but the only difference seems to be that the premium audit logs retain data for a year instead of 90 days.

Can I access the audit logs via the management API with any 365 licensing?

Microsoft 365 and Office | SharePoint | For business | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-11-24T02:31:39+00:00

    Dear Tim,

    You can download the license requirements from the link  subscription requirements in the article Auditing solutions in Microsoft Purview | Microsoft Learn.

    Sincerely

    Cliff | Microsoft Community Moderator

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-11-23T23:47:29+00:00

    Hi Cliff, can you provide an official documentation link regarding the licensing requirements?

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-08-04T04:44:32+00:00

    Dear Erika,

    The Audit (Premium) license contains the following information.

    1. Audit (Premium) retains all Exchange, SharePoint, and Azure Active Directory audit records for one year. 

    Microsoft Purview Audit (Premium) | Microsoft Learn

    1. To benefit from user-level Audit (Premium) capabilities, a user needs to be assigned an E5/A5/G5 license.

    Microsoft Purview Audit (Premium) | Microsoft Learn

    1. Audit (Premium) works with Office 365 Management Activity API.
    2. Audit (Premium) provides the following events:

    MailItemsAccessed

    Send

    SearchQueryInitiatedExchange

    SearchQueryInitiatedSharePoint

    Other Audit (Premium) events in Microsoft 365

    Microsoft Purview Audit (Premium) | Microsoft Learn

    If you have Microsoft 365 E3 or other subscriptions not containing Audit (Premium), you can only get data to audit log events of Audit (Standard) and the audit log policy is 90 days. Of course it also works with Office 365 Management Activity API.

    Auditing solutions in Microsoft Purview | Microsoft Learn

    Hope that the information above helps you!

    Sincerely

    Cliff | Microsoft Community Moderator

    Was this answer helpful?

    0 comments