How to Get SharePoint Online User Activity Report

Tracking user activity for specific files on a SharePoint Online site is crucial for maintaining data integrity and preventing unauthorized access. By monitoring file access, modifications, and deletions, you can identify responsible individuals and take timely action to protect your valuable data.

You can monitor user activity for a particular file using the methods below.

• The SharePoint File/Folder Access report from AdminDroid helps you view all the activities performed by the users on the SharePoint Online files and folders.
• This report includes the user's name, department, job title, activity time, file/folder name, and operation performed, which can help you detect if any unintended users are accessing sensitive files.

Handy Tip: Use the Target File filter to view user activities for a specific file.

Preventing sensitive information leaks through unapproved external sharing is a crucial concern for many organizations. Employees may unintentionally share confidential data outside the organization via SharePoint Online. To identify and address these potential security risks, it's essential to monitor external sharing activities.

Here’s how you can effectively manage and track SharePoint Online external sharing activities across different methods.

• The File/Folders Shared to External Users audit report provides insights into SPO external sharing activities. You can refine this report by applying the Workload filter to SharePoint.
• The report consolidates event time, item name, site URL, user who shared the item, recipient, user's IP address, and more.

Understanding who invites external users helps in managing permissions effectively. This ensures that the designated Microsoft 365 users have appropriate access levels, maintaining data integrity and confidentiality within SharePoint sites.

• Access AdminDroid’s dedicated report on SharePoint External User Invites, designed to streamline your external user invitation tracking.
• This report provides granular details such as event time, invitation sender and receiver, sender IP, shared item, and more, ensuring that external sharing aligns with organizational policies.

Handy Tip: Use the alert feature (bell icon) in the report to get immediate notifications for site collection invitations shared with external users.

For teams working on collaborative projects, it’s important to ensure that all members are actively engaging with the shared content. By tracking page access, you can monitor team involvement and take steps to ensure that all team members are actively participating and viewing important content.

Understand standard metrics of SPO page views

By default, SharePoint does not display detailed metrics on who accessed or viewed SharePoint Online pages. To view page visitor information, you must activate a specific site-level feature, which requires Site Owner permissions.

To track who has viewed pages on your SharePoint Online site, follow the steps below.

• Use the Viewed SharePoint Pages report from AdminDroid to track and monitor all page view activities on SharePoint Online.
• This report simplifies page interaction management and analysis by providing a centralized overview, eliminating the need to navigate individual sites for viewer details.

In today's digital age, where data breaches are commonplace, protecting your SharePoint Online files is paramount. Auditing who accesses, modifies, and shares these files adds a crucial layer of security. Therefore, tracking these activities helps prevent unauthorized access and ensures the integrity of your sensitive information.

With the help of the Get-MgReportSharePointActivityUserDetail PowerShell cmdlet, you can get the aggregated information on SharePoint users’ activity. But it doesn't offer in-depth details like a file name, name of the activity performed, user’s IP address, file location, site URL, etc.

Overlooking SharePoint Online user’s activity logs can result in missing critical indicators such as file deletions, modifications, or access patterns, which may indicate accidental or intentional data loss.

Here is a quick glimpse!