Can we pull change in TEAMS configuration data through TEAMS connector?

%3CLINGO-SUB%20id%3D%22lingo-sub-1644233%22%20slang%3D%22en-US%22%3ECan%20we%20pull%20change%20in%20TEAMS%20configuration%20data%20through%20TEAMS%20connector%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1644233%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20anyone%20know%20if%20we%20can%20pull%20the%20TEAMS%20configuration%20change%20data%20via%20the%20O365%20data%20connector%3F%26nbsp%3B%20I%20queried%20the%20%22OfficeActivity%22%20table%20and%20it%20didn't%20fetch%20me%20the%20details%20pertaining%20to%20the%20configuration%20changes%20made%20through%20the%20TEAMS%20app.%20The%20change%20I%20did%20was%2C%20allowed%20external%20users%20as%20mentioned%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fmanage-external-access%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E%3C%2FP%3E%3CP%3EIs%20there%20any%20other%20table%20apart%20from%20%22OfficeActivity%22%20that%20I%20should%20be%20querying%20to%20fetch%20this%20configuration%20change%3F%20I%20read%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fdetailed-properties-in-the-office-365-audit-log%3Fview%3Do365-worldwide%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Edocument%3C%2FA%3E%26nbsp%3Bon%20what%20all%20data%20is%20collected%20for%20TEAMS%20audit%20logs%20and%20didn't%20see%20any%20reference%20to%20configuration%20changes%20details.%26nbsp%3B%20I%20understand%20that%20the%20TEAMS%20backbone%20is%20SharePoint%2C%20so%20shall%20I%20be%20tracking%20the%20configuration%20change%20via%20SharePoint%20audit%20logs%2C%20again%20sorry%20if%20this%20question%20needs%20to%20be%20raised%20through%20the%20Office365%20community.%20Appreciate%20any%20pointers%20or%20response.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%2C%3C%2FP%3E%3CP%3EChinmoy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1645415%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20we%20pull%20change%20in%20TEAMS%20configuration%20data%20through%20TEAMS%20connector%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1645415%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F721132%22%20target%3D%22_blank%22%3E%40chinmoyJ%3C%2FA%3E%26nbsp%3BAs%20of%20right%20now%2C%20what%20you%20see%20is%20what%20you%20get.%26nbsp%3B%20I%20know%20there%20are%20plans%20to%20expand%20the%20information%20coming%20through%20the%20connector%20however%20I%20have%20no%20insights%20into%20what%20that%20data%20would%20be.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20was%20an%20older%20blog%20post%2C%20listed%20below%2C%20about%20getting%20information%20from%20Teams%20without%20using%20a%20connector%20and%20it%20may%20be%20of%20use%20to%20you.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fprotecting-your-teams-with-azure-sentinel%2Fba-p%2F1265761%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fprotecting-your-teams-with-azure-sentinel%2Fba-p%2F1265761%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Does anyone know if we can pull the TEAMS configuration change data via the O365 data connector?  I queried the "OfficeActivity" table and it didn't fetch me the details pertaining to the configuration changes made through the TEAMS app. The change I did was, allowed external users as mentioned here

Is there any other table apart from "OfficeActivity" that I should be querying to fetch this configuration change? I read the document on what all data is collected for TEAMS audit logs and didn't see any reference to configuration changes details.  I understand that the TEAMS backbone is SharePoint, so shall I be tracking the configuration change via SharePoint audit logs, again sorry if this question needs to be raised through the Office365 community. Appreciate any pointers or response.

 

Cheers,

Chinmoy

1 Reply
Highlighted

@chinmoyJ As of right now, what you see is what you get.  I know there are plans to expand the information coming through the connector however I have no insights into what that data would be. 

 

There was an older blog post, listed below, about getting information from Teams without using a connector and it may be of use to you.

https://techcommunity.microsoft.com/t5/azure-sentinel/protecting-your-teams-with-azure-sentinel/ba-p...