getting error while enabling audit in purview

Question

even we have runned provided cmd , still same issue, cmd result show isdehydrated :- yes

Answer 1

Refer to https://learn.microsoft.com/en-us/answers/questions/5104579/unable-to-turn-on-audit-log-search-on-microsoft-36

You have to be assigned the Audit Logs role in Exchange Online to turn audit log search on or off in your Microsoft 365 organization. By default, this role is assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center. Global admins in Microsoft 365 are members of the Organization Management role group in Exchange Online. Moreover, since the powershell indicates you already enabled , you can run powershell to turn off, then turn it on to see the result.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin