Recent Activity Reports for SharePoint Online
Folder Activity Reports
Recently Copied / Moved Folder
This report shows information about the list of folders copied / moved recently in your SharePoint Online environment with related audit information.
Recently Modified / Renamed Folder
This report shows information about the list of folders modified / renamed recently in your SharePoint Online environment with related audit information.
Recently Created / Deleted / Restored Folder
This report shows information about the list of folders created / deleted / restored recently in your SharePoint Online environment with related audit information.
Recently Deleted folder from recycle bin / Deleted file from second stage recycle bin
This report shows information about the list of folder deleted recently from recycle bin and secondary storage recycle bin in your SharePoint Online environment with related audit information.
Synchronization Activity Reports
Allowed / Blocked computer to sync files
This report shows information about the list of allow / block activities of Computers to sync files from your SharePoint Online environment with related audit information.
Download files / file changes to computer
This report shows information about the list of files / file changes downloaded from your SharePoint Online environment with related audit information.
Upload files to document library / file changes to document library
This report shows information about the list of files / file changes uploaded to your SharePoint Online environment with related audit information.
Site Permission Activity Reports
Recently Created / Deleted / Updated group
This report shows information about the list of groups that are Recently Created / Deleted / Updated in your SharePoint Online environment with related audit information.
Recently added site collection admin access
This report shows information about the list of Site collection administration access that are Recently added in the site collection in your SharePoint Online environment.
Requested site admin permissions
This report shows information about the list of site admin permissions requested and its related information in your SharePoint Online environment with related audit information.
Recently added / removed user or group from SharePoint group
This report shows information about the list of users / groups that are Recently added / removed user or group from SharePoint group and its related information in your SharePoint Online environment with related audit information.
Modified site permission
This report shows information about the list of permissions that are Modified and its related information that occurred in your SharePoint Online environment.
Application Administration Activity Reports
Added service principal
This report shows information about the list of service principal that are added in your environment with related audit information.
Removed a service principal from the directory
This report shows information about the list of service principal which are removed from your environment.
Set delegation entry
This report shows information if an authentication permission was updated for an application in Azure AD.
Removed credentials from a service principal
This report shows information when the credentials were removed from a service principal in Azure AD.
Added delegation entry / Removed delegation entry
This report shows information when an authentication permission was created / granted / removed to an application in Azure AD.
Added credentials to a service principal
This report shows information when the credentials were added to a service principal in Azure AD. A service principle represents an application in the directory.
Microsoft Team Activity Reports
Team Created / Deleted
This report shows information when a user creates / deleted a team.
Channel Added / Deleted
This report shows information when a user adds / deletes a channel from a team.
Changed organization setting
This report shows information when some of the activities are performed by a global admin on a team like Enable or disable Microsoft Teams for the organization, Enable or disable the ability for team members to schedule private meetings, channel meetings etc.
Changed team setting
This report shows information when some of the activities are performed by a global admin on a team like Changes the name of a team, Changes the team description, etc.
Changed channel setting
This report shows information when some of the activities are performed by a team member like Changes the name of a team channel and Changes the description of a team channel.
Using signed in to Teams
This report shows information on sign-in activity in to a Microsoft Teams client.
Changed role of members in team
This report shows information when a team owner changes the role of member(s) in a team.
Removed members from team
This report shows information when a team owner removes member(s) from a team.
Added members from team
This report shows information when a team owner Add member(s) to a team.
eDiscovery Activity Reports
Content search Created / Deleted
This report shows information when a content search was created / deleted.
Content search Started / Stopped / Changed
This report shows information when a user started / stopped / changed a content search.
Started export of content search / Removed export of content search
This report shows information when a user exports the results of a content search or a content search export action was deleted.
Download export of content search
This report shows information when a user downloads the results of a content search to their local computer.
Search permission filter Created / Deleted /Changed
This report shows information when a search permissions filter was created / deleted / modified.
eDiscovery administrator created / deleted
This report shows information when a user was added / removed as a member of an eDiscovery case.
Changed eDiscovery case membership / admin membership
This report shows information when the membership list of an eDiscovery case was changed / admin membership.
