Share via

Get-AipServiceDocumentLog

  • Reference
Module:
AIPService

Gets protection information about documents that are tracked by Azure Information Protection.

This cmdlet is supported by both the Azure Information Protection classic and unified labeling clients, with different usage, as described below.

Syntax

Get-AipServiceDocumentLog
   -ContentName <String>
   -Owner <String>
   [-FromTime <DateTime>]
   [-ToTime <DateTime>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The Get-AIPServiceDocumentLog cmdlet runs a query to return protection information about tracked documents.

Information returned includes:

  • The document content ID, with the document name if available.
  • The Rights Management owner and Rights Management issuer.
  • The users and groups that were granted access.
  • The protection template ID or specific usage rights that protect the document.
  • Any expiry, offline access, or revocation setting.

You can specify a start time and stop time of entries to include. The output is returned as a list of PowerShell objects in the PowerShell console.

For more information, see Rights Management owners and IRights Management issuers.

When used with the unified labeling client, the query is based on the document name, the owner email, or both.

You must specify at least one of the following parameters:

  • ContentName
  • Owner

Tip

If you use the ContentName parameter, we recommend that you also use the FromTime and ToTime parameters to filter your content to a specific time period.

Examples

Example 1: (Unified labeling client only) Get protection information about all tracked documents with a specific filename, which were protected in a specific timeframe

Get-AipServiceDocumentLog -ContentName "test.docx" -FromTime "12/01/2020 00:00:00" -ToTime "12/31/2020 23:59:59"

This command runs a query and returns protection information about all tracked documents stored on your tenant with the filename test.docx, which were protected in December 2020.

Example 2: (Unified labeling client only) Get protection information about all tracked documents with a specific filename and owner, which were protected in a specific timeframe

Get-AipServiceDocumentLog -ContentName "test.docx" -Owner “alice@microsoft.com” -FromTime "12/01/2020 00:00:00" -ToTime "12/31/2020 23:59:59"

This command runs a query and returns protection information about all tracked documents stored on your tenant that match the following details:

  • The filename is test.docx
  • The file was protected by a user with the email alice@contoso.com
  • The file was protected in December 2020.

Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ContentName

Specifies the tracked document's full name, including the file extension.

If you have the unified labeling client, you must include either this parameter, or the Owner parameter, or you can include both.

Tip

If you use this parameter, we recommend that you also use the the FromTime and ToTime date filters to filter the data returned.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-FromTime

Specifies the start time (inclusive) for the log file as a DateTime object. To obtain a DateTime object, use the Get-Date cmdlet. Specify the date and time according to your system locale settings.

For more information, type Get-Help Get-Date.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Owner

Specifies the email address of the user who protected the document (the Rights Management issuer or owner).

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-ToTime

Specifies the stop time (inclusive) for the log file as a DateTime object. To obtain a DateTime object, use the Get-Date cmdlet. Specify the date and time according to your system locale settings.

For more information, type Get-Help Get-Date.

Type:DateTime
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False