gebeurtenis
17 mrt, 21 - 21 mrt, 10
Neem deel aan de meetup-serie om schaalbare AI-oplossingen te bouwen op basis van praktijkgebruiksvoorbeelden met collega-ontwikkelaars en experts.
Nu registrerenMicrosoft Entra audit logs API overview
Namespace: microsoft.graph
Belangrijk
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Microsoft Entra provides an audit trail of all user and app activity in your tenant to help you track all activities in your tenant and also be compliant. These logs include both app and user sign in activity, as well as changes to the directory.
The availability of these audit logs is governed by the Microsoft Entra data retention policies.
Notitie
Custom security attribute audit logs and provisioning logs are currently available only on the beta endpoint.
The directory audit logs provide you with access to the history of every task performed in your tenant, either by a user or a service. Amongst others, the provided data enables you to address common scenarios such as:
- Who granted admin group access to a directory user?
- Which users are signing in to a recently acquired app?
- How many passwords resets were made within the directory?
The sign-in logs help you determine who or what performed the tasks reported by directory audit logs. The logs include interactive user sign-ins, non-interactive user sign-ins, service principal sign-ins, and managed identity sign-ins.
The sign-ins report helps you answer questions like:
- What is the sign in pattern of a user?
- How many users have signed in during the last week?
- What's the status of these sign-ins?
Here are popular requests for working with report data:
| Operation | URL |
|---|---|
| GET tenant user activities | https://graph.microsoft.com/v1.0/auditLogs/directoryAudits |
| GET custom security attribute audit logs | https://graph.microsoft.com/v1.0/auditLogs/customSecurityAttributeAudits |
| GET tenant sign-ins | https://graph.microsoft.com/beta/auditLogs/signIns |
Activity reports are available for features that you've licensed. If you have a license for a specific feature, you also have access to the reports. For more information about license requirements for the different activity reports, see Microsoft Entra audit logs: License and role requirements.