In the left navigation pane of the compliance portal, click Show all and then click Audit. Go to and sign in using an account that has been assigned the appropriate audit permissions. Now you're ready to search the audit log in the Microsoft Purview compliance portal. The following screenshot shows the two audit-related roles assigned to the Organization Management role group in the Exchange admin center. For more information, see Manage role groups in Exchange Online. To give a user the ability to search the audit log with the minimum level of privileges, you can create a custom role group in Exchange Online, add the View-Only Audit Logs or Audit Logs role, and then add the user as a member of the new role group. Global administrators in Office 365 and Microsoft 365 are automatically added as members of the Organization Management role group in Exchange Online. By default, these roles are assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center. Step 2: Assign permissions to search the audit logĪdmins and members of investigation teams must be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the audit log. In Audit (Standard), audit records are retained and searchable in the audit log for 90 days.įor a list of subscription and licensing requirements for Audit (Standard), see Auditing solutions in Microsoft 365. When an audited activity is performed by a user or admin, an audit record is generated and stored in the audit log for your organization. Licensing for Audit (Standard) requires the appropriate organization subscription that provides access to audit log search tool and per-user licensing that's required to log and retain audit records. Step 1: Verify organization subscription and user licensing These steps include ensuring the proper organizational subscriptions and user licensing required to generate and preserve audit records and assigning permissions to team members of your security operations, IT, compliance, and legal teams so that can search the audit log.įor more information, see Audit (Standard) in Microsoft 365. This article discusses the following steps necessary to set up Audit (Standard). Because Audit (Standard) is enabled by default for most Microsoft 365 and Office 365 organizations, there's only a few things you need to do before you and others in your organization can search the audit log. Microsoft Purview Audit (Standard) in Microsoft 365 lets you search for audit records for activities performed in the different Microsoft 365 services by users and admins.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |