What are the user activity audit logs available in Microsoft Purview Compliance Portal?
In Microsoft 365, various types of user activities can be tracked through audit logs. Those key activities are listed below:
- User’s Sign-in Activities: Keeps track of when Microsoft users login and log out, including successful and failed log-in attempts.
- EXO Mailbox Activities: Monitoring actions such as sending, receiving, forwarding deleting, or moving emails within Exchange Online.
- SPO File and Folder Activities: Tracks user interactions on files & folders in SharePoint Online and OneDrive for Business that includes views, edits, uploads, downloads, and deletions.
- External Sharing and Collaboration Activities: Monitors user activities related to sharing files, folders, & sites that include invitations sent, and granting & revoking permissions during external collaboration.
- MS Teams Collaboration Activities: Tracks user interactions within Microsoft Teams, such as channel creations, posting messages, file sharing, and meeting attendance.
- Security and Compliance: Recording security-related events, such as policy changes, malware detection, data loss prevention (DLP) violations, and suspicious sign-in attempts.
AdminDroid allows you to simply monitor user activities based on geography, department, job title, and other parameters.
- With the Microsoft 365 Usage and Adoption dashboard, you gain insights into user engagement by reviewing the number of activities, active users, and licensed users across different categories. This dashboard can be accessed from .
- View activities by specific departments, job titles, cities, or states using the filters available for Event Time, Workload, and Operation.
![faq-1](../images/how-to-images/azure/user-activity-audit/faq-1.png?v=5110_21)