Recent Activity Reports for SharePoint Online

Folder Activity Reports


Recently Copied /Moved Folder

This report shows information about the list of folders copied / moved recently in your SharePoint Online environment with related audit information.

Recently Modified / Renamed Folder

This report shows information about the list of folders modified / renamed recently in your SharePoint Online environment with related audit information.

Recently Created / Deleted / Restored Folder

This report shows information about the list of folders created / deleted / restored recently in your SharePoint Online environment with related audit information.

Recently Deleted folder from recycle bin / Deleted file from second stage recycle bin

This report shows information about the list of folder deleted recently from recycle bin and secondary storage recycle bin in your SharePoint Online environment with related audit information.

Synchronization Activity Reports


Allowed / Blocked computer to sync files

This report shows information about the list of allow / block activities of Computers to sync files from your SharePoint Online environment with related audit information.

Download files / file changes to computer

This report shows information about the list of files / file changes downloaded from your SharePoint Online environment with related audit information.

Upload files to document library / file changes to document library

This report shows information about the list of files / file changes uploaded to your SharePoint Online environment with related audit information.

Site Permission Activity Reports


Recently Created / Deleted / Updated group

This report shows information about the list of groups that are Recently Created / Deleted / Updated in your SharePoint Online environment with related audit information.

Recently added site collection admin access

This report shows information about the list of Site collection administration access that are Recently added in the site collection in your SharePoint Online environment.

Requested site admin permissions

This report shows information about the list of site admin permissions requested and its related information in your SharePoint Online environment with related audit information.

Recently added / removed user or group from SharePoint group

This report shows information about the list of users / groups that are Recently added / removed user or group from SharePoint group and its related information in your SharePoint Online environment with related audit information.

Modified site permission

This report shows information about the list of permissions that are Modified and its related information that occurred in your SharePoint Online environment.

Application Administration Activity Reports


Added service principal

This report shows information about the list of service principal that are added in your environment with related audit information.

Removed a service principal from the directory

This report shows information about the list of service principal which are removed from your environment.

Set delegation entry

This report shows information if an authentication permission was updated for an application in Azure AD.

Removed credentials from a service principal

This report shows information when the credentials were removed from a service principal in Azure AD.

Added delegation entry / Removed delegation entry

This report shows information when an authentication permission was created/granted/removed to an application in Azure AD.

Added credentials to a service principal

This report shows information when the credentials were added to a service principal in Azure AD. A service principle represents an application in the directory.

Microsoft Team Activity Reports


Team Created / Deleted

This report shows information when a user creates / deleted a team.

Channel Added / Deleted

This report shows information when a user adds / deletes a channel from a team.

Changed organization setting

This report shows information when some of the activities are performed by a global admin on a team like Enable or disable Microsoft Teams for the organization, Enable or disable the ability for team members to schedule private meetings, channel meetings etc.

Changed team setting

This report shows information when some of the activities are performed by a global admin on a team like Changes the name of a team, Changes the team description, etc.

Changed channel setting

This report shows information when some of the activities are performed by a team member like Changes the name of a team channel and Changes the description of a team channel.

Using signed in to Teams

This report shows information on sign-in activity in to a Microsoft Teams client.

Changed role of members in team

This report shows information when a team owner changes the role of member(s) in a team.

Removed members from team

This report shows information when a team owner removes member(s) from a team.

Added members from team

This report shows information when a team owner Add member(s) to a team.

eDiscovery Activity Reports


Content search Created / Deleted

This report shows information when a content search was created / deleted.

Content search Started / Stopped / Changed

This report shows information when a user started / stopped / changed a content search.

Started export of content search / Removed export of content search

This report shows information when a user exports the results of a content search or a content search export action was deleted.

Download export of content search

This report shows information when a user downloads the results of a content search to their local computer.

Search permission filter Created / Deleted /Changed

This report shows information when a search permissions filter was created / deleted / modified.

eDiscovery administrator created / deleted

This report shows information when a user was added / removed as a member of an eDiscovery case.

Changed eDiscovery case membership / admin membership

This report shows information when the membership list of an eDiscovery case was changed / admin membership.