Forum Discussion
Wolverine
Mar 04, 2019Copper Contributor
Monitoring Office 365 Administrators
What is the best way to monitor our office 365 administrators user? I am not familiar with office365 too much but I would like to find a list of actions associated with an administrator. How could I do that?
- Of course the global admin and
From the link I provided:
You have to be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the Office 365 audit log. By default, these roles are assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center.
More info in the link!
Adam
- Cian AllnerSilver Contributor
You might also want to check out the Office 365 Auditing Report Tool, which has many reports built-in that could be used to check on admin level activities.
Office 365 Auditing Report Tool - You can use the audit log in the security and compliance center:
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance- WolverineCopper ContributorThank you!! What role would a user need to be to perform the audit log search?
- Of course the global admin and
From the link I provided:
You have to be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the Office 365 audit log. By default, these roles are assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center.
More info in the link!
Adam
Audit log can help, btw please be aware on the number of days on logs, I recalled below 90days below E5 license