Microsoft Purview | Audit: New logs for Standard users

Microsoft Purview will be introducing new standard logs for Microsoft Exchange, Microsoft SharePoint, and Microsoft Teams workloads. The rollout will take place in stages and is associated with Microsoft 365 Roadmap IDs 182259 (Exchange and SharePoint) and 182242 (Teams). The initial rollout will begin in early March 2024 and conclude in mid-June 2024, followed by the standard release in late June 2024 and mid-September 2024. These changes will provide standard Purview Audit users access to previously exclusive Exchange, Teams, and SharePoint events, thereby expanding cloud security activity events access. The new standard logs include Exchange Send, mail items accessed, search query initiated exchange, SharePoint search query initiated sharepoint, Teams meeting participant detail, message sent, message listed, meeting detail, message updated, chat retrieved, message read, message hosted content read, subscribed to messages message hosted contents listed, chat created, chat updated, message created notification, message deleted notification, and message updated notification. To ensure the new logs are generated, an admin may need to ensure appropriate mailbox settings are enabled. Changes can be made in Exchange Online PowerShell by either resetting each mailbox to the default settings using a specific command or by adding the new standard logs to each mailbox.

The post Microsoft Purview | Audit: New logs for Standard users was originally published on M365 Admin.