Share via

Get-PnPUnifiedAuditLog using error

testUser 41 Reputation points
2022-07-13T01:26:12.61+00:00

When i try to get microsoft 365 audit log with pnp powershell, it reports

 Get-PnPUnifiedAuditLog : Trying to get a token for a different endpoint while being connected through an ACS token is  
    not possible. Please connect differently.  

Firstly, I created a app with ActivityFeed.Read permissions to get unified audit logs from the Office 365 Management API in aad,
Then I use the following code:

Connect-PnPOnline -Url https://contoso.sharepoint.com -ClientId e68b50b6-ef63-4396-acc9-97260482000a -ClientSecret 8oh8Q~ooooP3sE2qSJpWOWlxE9o9o9_S4X~NdaPl  
Get-PnPUnifiedAuditLog -ContentType SharePoint -StartTime (Get-Date).AddDays(-2) -EndTime (Get-Date).AddDays(-1)  
Microsoft 365 and Office | SharePoint | Development
Microsoft 365 and Office | SharePoint | For business | Windows
Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

1 answer

Sort by: Most helpful
  1. Tong Zhang_MSFT 9,261 Reputation points
    2022-07-13T08:56:33.01+00:00

    Hi @testUser ,

    Per my research and test, currently I cannot reproduce this issue. Please try to do a troubleshooting, please follow these steps to use Get-PnPUnifiedAuditLog command ,and check if anything is missed:

    1.Refer to this document to Create an Azure AD app registration for the Office 365 Management API.
    2.Connect to SharePoint using Connect-PnPOnline ,and use Client Id and Client Secret of Azure AD app you created in first step.

    Connect-PnPOnline -Url https://contoso.sharepoint.com -ClientId xxxxxxx -ClientSecret xxxxxxxxx  
    

    3.Then use Get-PnPUnifiedAuditLog command.

    Hope it can help you. Thanks for your understanding.

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.