Edit

Audit Sales agent activity with Microsoft Purview

Sales agent integrates with Microsoft Purview, so compliance and security teams can see how the agent is used and what CRM data it accesses on a user's behalf. This integration works regardless of whether Sales agent connects to Dynamics 365 or Salesforce.

Note

Microsoft Purview is a compliance and auditing tool. It answers "what data did users and agents access, read, or change?" It surfaces data access and data flow across the organization at the user and application level. Purview isn't a usage-analytics or adoption tool. It doesn't capture the prompts that users type into Sales agent.

Prerequisites and permissions

Audit logs for Microsoft 365 Copilot and its agents, including Sales agent, are available automatically. No additional setup or configuration is required.

To view audit logs, an admin must have one of the following roles:

Role Description
Audit Reader Minimum role required in the Purview portal to view audit logs.
Compliance Administrator Manage compliance settings in the Purview portal.

For more information, see:

View Sales agent audit logs in Microsoft Purview

Microsoft Purview automatically captures every interaction between a user and a Microsoft 365 Copilot agent, including Sales agent, at the Microsoft 365 level.

Note

Audit entries can take 30 minutes to 2 hours to appear after an interaction occurs. The standard retention period is 180 days. You can extend the retention period by using Audit Premium.

To search for Sales agent activity:

  1. Go to the Microsoft Purview portal.
  2. Select Audit > Search.
  3. Create a search filtered to Copilot interactions, using the record type for Copilot activity.
  4. Optionally, save the search to reuse it later.

What the audit record includes

For each Sales agent interaction, the audit record contains the following information:

Field Description
Agent information The application or agent used. For Sales agent, this information starts with "Microsoft Agent Sales".
Connected CRM organization Details about the connected CRM environment, whether it's Dynamics 365 or Salesforce.
User information The user who ran the interaction and the IP address they connected from.
Date and time When the activity occurred.
Action performed The operation type: Read or Update. The delete actions are also recorded as Update.
Resources accessed Links to the specific CRM records read or updated, emails accessed, and similar resources.

Note

The audit logs don't capture the following information:

  • The user's prompt text.
  • The full response generated by Copilot.

Purview logs only the data that was accessed (CRM records read or updated).

You can export audit records to a CSV file.

Common uses

  • Compliance auditing — Confirm that data access and data flow match your organization's compliance policies.
  • Monitoring data access — Track what data users access or change over time.
  • Alerting and investigation — Identify anomalous activity, such as a user reading an unusually large number of records.
  • Last updated on