Microsoft Tech Community Live:  Microsoft Teams Edition
November 09, 2021, 08:00 AM - 12:00 PM (PST)
SOLVED

Teams Policy Audit Logs

%3CLINGO-SUB%20id%3D%22lingo-sub-2291716%22%20slang%3D%22en-US%22%3ETeams%20Policy%20Audit%20Logs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2291716%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20recently%20had%20a%20change%20to%20one%20of%20our%20Team%20Policy%20and%20I%20need%20to%20find%20the%20person%20who%20made%20that%20change.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20looked%20through%20Audit%20Log%20Search%20within%20Office%20365%20Security%20and%20Compliance%2C%20and%20found%20no%20options%20the%20would%20identified%20any%20changes%26nbsp%3B%20to%20Teams%20policies%20or%20the%20person%20who%20made%20those%20changes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20another%20interface%20or%20PowerShell%20that%20will%20allow%20me%20to%20pull%20audit%20log%20to%20all%20changes%20to%20Team%20Policies%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20You%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Larry%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2291716%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActivity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2291930%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Policy%20Audit%20Logs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2291930%22%20slang%3D%22en-US%22%3EHello%2C%20these%20are%20all%20the%20searchable%20Teams%20activities%2C%20perhaps%20you've%20already%20been%20there%20but%20adding%20anyway.%20Just%20browsed%20through%20but%20didn't%20see%20any%20related%20to%20specific%20policies%20only%20to%20some%20settings%20that%20can%20be%20controlled%20with%20policies.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Faudit-log-events%23teams-activities%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Faudit-log-events%23teams-activities%3C%2FA%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

We recently had a change to one of our Team Policy and I need to find the person who made that change. 

 

I looked through Audit Log Search within Office 365 Security and Compliance, and found no options the would identified any changes  to Teams policies or the person who made those changes.

 

Is there another interface or PowerShell that will allow me to pull audit log to all changes to Team Policies?

 

Thank You,

 

-Larry 

3 Replies
best response confirmed by Larry Jones (Frequent Contributor)
Solution

Hello, these are all the searchable Teams activities, perhaps you've already been there but adding anyway. Just browsed through but didn't see any related to specific policies only to some settings that can be controlled with policies.

https://docs.microsoft.com/en-us/microsoftteams/audit-log-events#teams-activities

 

Adding this from the below post: 

Cloud App Security --> Activity Log --> Activity Type: TeamsAdminAction

Although the article didn't directly point the direction; however, it did lead me to Cloud App Security --> Activity Log --> Activity Type: TeamsAdminAction

Here is was able to find the users who made the change Team's Meeting Policy.

Thank You,

-Larry
That's awesome Larry, my pleasure. Just went back and read more thoroughly. Thanks for adding this to the conversation as I probably would't have returned to that page (not today at least).