Forum Discussion
Way to audit user logins and file access in a SharePoint Online site?
Is there a native method to be able to track user logins and file access (both view and edit) in SharePoint sites? I haven't found a clear method to be able to pull this level of information from any of the native SPO logging.
- Those are logged in the M365 Unified audit log, or are you looking for SPO native solution?
Whichever way I can get a daily recurring automated report of Guest users who have logged into SharePoint Online, I'll take it.
Do you know if getting automated reports like this are available via Purview, or is there some other method (Power Automate) that I would be able to pull these audit records and have the results sent daily as an email (or email attachment)?
- There is no automated way. Best you can do with the built-in tools is to configure an activity/protection alert, but that will result in an email for each event. Instead, you can schedule a PowerShell script to fetch the data via Search-UnifiedAuditLog and email you the results. Here's an article by Tony that guides you over the process: https://practical365.com/azure-automation-managed-identity-exchange/
- please monitor users' activity with Office 365 audit log
