How to get Teams Audit log using Office 365 Management Activity API

Question

Hi,

I need to get recent audit data of the Teams and SharePoint daily. I am able to get SharePoint audit data with the help of the Office 365 Management Activity API by subscribing to Audit.SharePoint but I am unable to get Teams Audit data even though I subscribed for Audit.General as the official article Office 365 Management Activity API reference | Microsoft Learn , mentions Audit.General includes all other workloads not included in the previous content types.

Please help me to get the Teams Activity data.

Thank you in advance.

Answer 1

Audit.General is the correct one to get Teams data, so it sounds like you subscribed to the correct one.

Some additional steps to confirm:

1) Make sure that you have enabled unified audit logging for your O365 organization.
2) Add Office 365 Management API permissions to Admin consent for the tenant with ActivityFeed.Read.
3) Then, search the audit log.

If you want to list the data programmatically, you can follow the step-by-step blog post by Rabia Williams. You can refer to the teams schema for information about specific attributes.

If you are unable to see certain events there could be permissions that are missing. If you are still having this issue let me know and I'll get the right people from the product team looped in to help out.