Logs for Secure Score

[TyGr503]

Is there a log to see who makes changes is MS Secure Score?

[#2 · Accepted solution]

They do log all admin actions that are taken. It depends on the type of change and the service that was changed.

You can take actions for MFA related topics -> Azure Active Directory logs

You can disable client based forwarding of emails -> Exchange Online audit logs

If you want to see all the actions of your admins or one specific. You can see those in the Security & Compliance center under "Reports" section.

More info here : https://docs.microsoft.com/en-us/office365/securitycompliance/reports-in-security-and-compliance?red...

[#3]

David is correct. You won't see logs of 'secure score' affecting actions, however, you can find a trail of the actions performed if you need it. If they are super important to you I also suggest creating triggers for them.