Companywide sharing list

%3CLINGO-SUB%20id%3D%22lingo-sub-1376051%22%20slang%3D%22en-US%22%3ECompanywide%20sharing%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1376051%22%20slang%3D%22en-US%22%3E%3CP%3EI%20need%20to%20build%20a%20list%20of%20all%20videos%20shared%20Companywide.%20I%20have%20tried%20to%20look%20in%20the%20O365%20Audit%20Log%20but%20I%E2%80%99m%20not%20finding%20any%20useful%20help%20here.%3C%2FP%3E%3CP%3EIn%20the%20%E2%80%9CStreamEditVideoPermissions%E2%80%9D%20event%20in%20the%20Audit%20Log%20I%20see%20the%20attribute%20%E2%80%9CAllowEveryoneInOrganization%5C%22%22%3Afalse%7D%E2%80%9D%20in%20the%20auditdata.%20I%20would%20then%20have%20expected%20to%20find%20a%20True%20value%20for%20videos%20shared%20companywide%2C%20but%20I%20don%E2%80%99t.%3C%2FP%3E%3CP%3ECan%20anyone%20point%20me%20to%20what%20to%20look%20for%20in%20the%20Audit%20Log%2C%20or%20in%20any%20other%20(maybe%20even%20smarter)%20direction%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1462851%22%20slang%3D%22en-US%22%3ERe%3A%20Companywide%20sharing%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1462851%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3985%22%20target%3D%22_blank%22%3E%40Thomas%20Friis%20Poulsen%3C%2FA%3E%26nbsp%3BDid%20you%20get%20anywhere%20with%20this%3F%26nbsp%3B%20I%20am%20about%20to%20log%20a%20ticket%20for%20the%20same%20issue...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1462874%22%20slang%3D%22en-US%22%3ERe%3A%20Companywide%20sharing%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1462874%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F689933%22%20target%3D%22_blank%22%3E%40alexpooley%3C%2FA%3E%26nbsp%3BNo.%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1463002%22%20slang%3D%22en-US%22%3ERe%3A%20Companywide%20sharing%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1463002%22%20slang%3D%22en-US%22%3EHave%20logged%20something%20so%20will%20update%20here.%20If%20someone%20accidentally%20shares%20something%20they%20shouldn't%20have%20with%20an%20entire%20org%20it%20would%20be%20useful%20to%20know%20how%2Fwhen%20it%20happened!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1477207%22%20slang%3D%22en-US%22%3ERe%3A%20Companywide%20sharing%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1477207%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3985%22%20target%3D%22_blank%22%3E%40Thomas%20Friis%20Poulsen%3C%2FA%3E%26nbsp%3BThe%20outcome%20from%20PS%20is%20that%20there%20is%20no%20log%20event%20which%20identifies%20a%20user%20enabling%20or%20disabling%20the%20share%20company%20wide%20permission.%26nbsp%3B%20A%20log%20event%20with%20an%20operation%20of%20%22StreamInvokeVideoSetLink%22%20is%20logged%2C%20but%20does%20not%20contain%20the%20detail.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe're%20taking%20this%20forward%20with%20our%20TAM%20as%20it%20feels%20like%20a%20big%20hole.%26nbsp%3B%20Videos%20can%20have%20multiple%20owners%20and%20as%20it%20is%20today%20you%20would%20struggle%20to%20evidence%20which%20of%20those%20owners%20made%20the%20video%20public.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1499705%22%20slang%3D%22en-US%22%3ERe%3A%20Companywide%20sharing%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1499705%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F689933%22%20target%3D%22_blank%22%3E%40alexpooley%3C%2FA%3E%26nbsp%3BI'd%20really%20appreciate%20knowing%20if%20there's%20an%20update%20on%20this%20as%20we%20are%20up%20against%20the%20same%20problem.%20And%20yes%2C%20it%20does%20seem%20a%20pretty%20big%20hole%20akin%20to%20%22who%20left%20the%20keys%20in%20the%20door%3F%22%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I need to build a list of all videos shared Companywide. I have tried to look in the O365 Audit Log but I’m not finding any useful help here.

In the “StreamEditVideoPermissions” event in the Audit Log I see the attribute “AllowEveryoneInOrganization\"":false}” in the auditdata. I would then have expected to find a True value for videos shared companywide, but I don’t.

Can anyone point me to what to look for in the Audit Log, or in any other (maybe even smarter) direction?

5 Replies

@Thomas Friis Poulsen Did you get anywhere with this?  I am about to log a ticket for the same issue...

 

 

@alexpooley No. :(

Have logged something so will update here. If someone accidentally shares something they shouldn't have with an entire org it would be useful to know how/when it happened!

@Thomas Friis Poulsen The outcome from PS is that there is no log event which identifies a user enabling or disabling the share company wide permission.  A log event with an operation of "StreamInvokeVideoSetLink" is logged, but does not contain the detail.

 

We're taking this forward with our TAM as it feels like a big hole.  Videos can have multiple owners and as it is today you would struggle to evidence which of those owners made the video public.

@alexpooley I'd really appreciate knowing if there's an update on this as we are up against the same problem. And yes, it does seem a pretty big hole akin to "who left the keys in the door?"