auditEvent resource type

Namespace: microsoft.graph

Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

A class containing the properties for Audit Event.

Methods

Method	Return Type	Description
List auditEvents	auditEvent collection	List properties and relationships of the auditEvent objects.
Get auditEvent	auditEvent	Read properties and relationships of the auditEvent object.
Create auditEvent	auditEvent	Create a new auditEvent object.
Delete auditEvent	None	Deletes a auditEvent.
Update auditEvent	auditEvent	Update the properties of a auditEvent object.
getAuditCategories function	String collection
getAuditActivityTypes function	String collection

Properties

Property	Type	Description
id	String	Key of the entity.
displayName	String	Event display name.
componentName	String	Component name.
actor	auditActor	AAD user and application that are associated with the audit event.
activity	String	Friendly name of the activity.
activityDateTime	DateTimeOffset	The date time in UTC when the activity was performed.
activityType	String	The type of activity that was being performed.
activityOperationType	String	The HTTP operation type of the activity.
activityResult	String	The result of the activity.
correlationId	Guid	The client request Id that is used to correlate activity within the system.
resources	auditResource collection	Resources being modified.
category	String	Audit category.

Relationships

None

JSON Representation

Here is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.auditEvent",
  "id": "String (identifier)",
  "displayName": "String",
  "componentName": "String",
  "actor": {
    "@odata.type": "microsoft.graph.auditActor",
    "type": "String",
    "auditActorType": "String",
    "userPermissions": [
      "String"
    ],
    "applicationId": "String",
    "applicationDisplayName": "String",
    "userPrincipalName": "String",
    "servicePrincipalName": "String",
    "ipAddress": "String",
    "userId": "String",
    "userRoleScopeTags": [
      {
        "@odata.type": "microsoft.graph.roleScopeTagInfo",
        "displayName": "String",
        "roleScopeTagId": "String"
      }
    ],
    "remoteTenantId": "String",
    "remoteUserId": "String"
  },
  "activity": "String",
  "activityDateTime": "String (timestamp)",
  "activityType": "String",
  "activityOperationType": "String",
  "activityResult": "String",
  "correlationId": "Guid",
  "resources": [
    {
      "@odata.type": "microsoft.graph.auditResource",
      "displayName": "String",
      "modifiedProperties": [
        {
          "@odata.type": "microsoft.graph.auditProperty",
          "displayName": "String",
          "oldValue": "String",
          "newValue": "String"
        }
      ],
      "type": "String",
      "auditResourceType": "String",
      "resourceId": "String"
    }
  ],
  "category": "String"
}