SP Audit Log WITHOUT accessing Security and Compliance Admin Page

Eli Elijah 1 Reputation point

Is there another way to get SP audit logs on a particular SP Online list? I'm a SP developer for our department and don't have access to the Security and Compliance admin page to pull audit reports. I tried using the OOTB audit log functionality in SP but it usually gets stuck on: (1) "Working on it..."; (2) Incomplete records; (3) Cannot view audit logs on who changed what.

I tried to reach out to someone in our team who has Global Admin and they refuses to give me access to at least generate SP audit logs. They also can't provide me the audit log raw data.

It's frustrating as I can easily do this in my previous company as I'm also Global Admin >_<

A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
9,212 questions
SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,765 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Echo Du_MSFT 17,091 Reputation points

    Hello @Eli Elijah ,

    Welcome to Q&A Forum!

    Generally speaking, you need to have Global Administrator rights to generate and view Audit Logs in the Security and Compliance Admin Page.

    According to my research, you can also get the Audit Log Reports through PowerShell. It is worth noting that you must be assigned the "View Audit Log Only" or "Audit Log" role in Exchange Online to successfully run the script. For more information, please see "Use a PowerShell script to search the audit log" article.

    Echo Du


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.