Audit Log or Alert for admin OneDrive Access

%3CLINGO-SUB%20id%3D%22lingo-sub-934173%22%20slang%3D%22en-US%22%3EAudit%20Log%20or%20Alert%20for%20admin%20OneDrive%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-934173%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20I%20can%20monitor%20when%20one%20of%20my%20IT%20admins%20has%20used%20the%20link%20within%20O365%20Users%20admin%20interface%20to%20access%20that%20users%20OneDrive%3F%3C%2FP%3E%3CP%3EI%20have%20checked%20through%20Sec%26amp%3BCompliance%20audit%20log%20viewer%20and%20also%20the%20alerts%20but%20nothing%20looks%20to%20address%20this%20specific%20scenario.%3C%2FP%3E%3CP%3EThanks%20all.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-934173%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-934532%22%20slang%3D%22en-US%22%3ERe%3A%20Audit%20Log%20or%20Alert%20for%20admin%20OneDrive%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-934532%22%20slang%3D%22en-US%22%3ESince%20ODFB%20is%20built%20on%20top%20of%20Office%20365%2C%20this%20information%20should%20be%20reflected%20in%20the%20Audit%20Log%20in%20Office%20365...there%20is%20an%20event%20of%20%22New%20site%20collection%20Admin%20added%22%20that%20could%20work%20here%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi All,

Is there a way I can monitor when one of my IT admins has used the link within O365 Users admin interface to access that users OneDrive?

I have checked through Sec&Compliance audit log viewer and also the alerts but nothing looks to address this specific scenario.

Thanks all.

1 Reply
Highlighted
Since ODFB is built on top of Office 365, this information should be reflected in the Audit Log in Office 365...there is an event of "New site collection Admin added" that could work here