User Profile
BM-HV
Copper Contributor
Joined Sep 08, 2020
User Widgets
Recent Discussions
How do I import Purview Unified Audit Log data related to the use of the Audit Log into Sentinel?
Dear Community, I would like to implement the following scenario on an environment with Microsoft 365 E5 licenses: Scenario: I want to import audit activities into an Azure Log Analytics workspace linked to Sentinel to generate alerts/incidents as soon as a search is performed in the Microsoft 365 Purview Unified Audit Log (primarily for IRM purposes). Challenge: Neither the "Microsoft 365" connector, nor the "Defender XDR" or "Purview" (which appear to be exclusively Azure Purview) connectors are importing the necessary data. Question: Which connector do I have to use in order to obtain Purview Unified Audit Log activities about the use of the Purview Unified Audit Log so that I can identify... ...which user conducted when an audit log search and with what kind of search query. Thank you!61Views0likes0CommentsRe: How do I import Purview Unified Audit Log data related to the use of the Audit Log into Sentinel?
Thanks, VasilMichev! The "Microsoft 365" connector was my first shot, and I'm importing data for SPO and EXO through that. However, it seems like it covers no Purview activities at all. What I need: Which user conducted when an audit log search and with what kind of search query.39Views0likes0CommentsHow do I import Purview Unified Audit Log data related to the use of the Audit Log into Sentinel?
Dear Community, I would like to implement the following scenario in an environment with Microsoft 365 E5 licenses: Scenario: I want to import audit activities into an Azure Log Analytics workspace linked to Sentinel to generate alerts/incidents as soon as a search is performed in the Microsoft 365 Purview Unified Audit Log (primarily for IRM purposes). Challenge: Neither the "Microsoft 365" connector, nor the "Defender XDR" or "Purview" connectors (which appear to be exclusively Azure Purview) are importing the necessary data. Question: Which connector do I have to use in order to obtain Purview Unified Audit Log activities about the use of the Purview Unified Audit Log so that I can use them to build corresponding rules in Sentinel? Thank you!69Views0likes2CommentsRe: SharePoint Online - Guest users access to people search
Did you find a solution to provide guest users access to the people search results? Guess it's a common use case to provide external users some kind of people search to find contact persons in an organization. I've tried everything from changing "external user permissions" in Entra ID to "granting permissions to my-Host" without any success...1.2KViews0likes0CommentsCustom search result type layout for SPO list element / hyperlink and people column
The customization of search result types seems to be poorly documented, so I'd like to ask if someone ever managed to include values from a "SPO managed porperty" linked to a Hyperlink column (explicitly the URL) and a Person/Group column (explicitly DisplayName and UPN) to a custom result type layout. Is it technically possible to access different values within such complex columns / managed properties and display them in custom result layouts (custom JSON)?452Views0likes0CommentsaddContentTypesFromHub prevents site script from execution
Hello dear community, I'm currently struggling with something very basic: I would like to apply a site design via REST API to a newly created teamsite. The site script is using "addContentTypesFromHub" to add content types from the content type hub to the site. Afterwards I'm using "addContentType" to register those content types at the "Documents" library. { "$schema": "schema.json", "actions": [ { "verb": "applyTheme", "themeName": "THEMENAME" }, { "verb": "addNavLink", "url": "URL", "displayName": "DISPLAYNAME" }, { "verb": "joinHubSite", "hubSiteId": "GUID" }, { "verb": "addContentTypesFromHub", "ids": [ "0x0101000DB8D4B86DFC664AA674C413C81BAB6A02", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0201", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0203", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A020D", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0208", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0202", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0207", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A020A", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A020C", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0204", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A020B", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A020E", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0205", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0209", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0206", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A020F", "0x0101000DB8D4B86DFC664AA674C413C81BAB6A0210" ] }, { "verb": "createSPList", "listName": "Dokumente", "templateType": 101, "subactions": [ { "verb": "addContentType", "name": "XXX" }, { "verb": "addContentType", "name": "XXX" }, { "verb": "addContentType", "name": "XXX" }, { "verb": "addContentType", "name": "XXX" }, { "verb": "addContentType", "name": "XXX" }, { "verb": "addContentType", "name": "XXX" }, { "verb": "addContentType", "name": "XXX" } ] }, { "verb": "setSiteExternalSharingCapability", "capability": "Disabled" }, { "verb": "triggerFlow", "url": "https://prod-20.germanywestcentral.logic.azure.com:443/workflows/XXX", "name": "XXX", "parameters": { "XXX": "XXX" } } ], "bindata": { }, "version": 1 } If I apply the site design via SharePoint site settings, everything works fine. However, if I'd like to apply the site design via REST API, the site design isn't applied. _api/Microsoft.SharePoint.Utilities.WebTemplateExtensions.SiteScriptUtility.ApplySiteDesign Body: {"siteDesignId": "GUID", "webUrl": "ROOTLEVELSITE"} If I delete the addContentTypesFromHub-part from the site script, I can apply the site design via REST-API without any problems. Someone else facing the same issue?838Views0likes0Comments
Recent Blog Articles
No content to show