auditEvent resource type

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

A class containing the properties for Audit Event.


Method Return Type Description
List auditEvents auditEvent collection List properties and relationships of the auditEvent objects.
Get auditEvent auditEvent Read properties and relationships of the auditEvent object.
Create auditEvent auditEvent Create a new auditEvent object.
Delete auditEvent None Deletes a auditEvent.
Update auditEvent auditEvent Update the properties of a auditEvent object.
getAuditCategories function String collection Not yet documented
getAuditActivityTypes function String collection Not yet documented


Property Type Description
id String Key of the entity.
displayName String Event display name.
componentName String Component name.
actor auditActor AAD user and application that are associated with the audit event.
activity String Friendly name of the activity.
activityDateTime DateTimeOffset The date time in UTC when the activity was performed.
activityType String The type of activity that was being performed.
activityOperationType String The HTTP operation type of the activity.
activityResult String The result of the activity.
correlationId Guid The client request Id that is used to correlate activity within the system.
resources auditResource collection Resources being modified.
category String Audit category.



JSON Representation

Here is a JSON representation of the resource.

  "@odata.type": "#microsoft.graph.auditEvent",
  "id": "String (identifier)",
  "displayName": "String",
  "componentName": "String",
  "actor": {
    "@odata.type": "microsoft.graph.auditActor",
    "type": "String",
    "userPermissions": [
    "applicationId": "String",
    "applicationDisplayName": "String",
    "userPrincipalName": "String",
    "servicePrincipalName": "String",
    "ipAddress": "String",
    "userId": "String"
  "activity": "String",
  "activityDateTime": "String (timestamp)",
  "activityType": "String",
  "activityOperationType": "String",
  "activityResult": "String",
  "correlationId": "Guid",
  "resources": [
      "@odata.type": "microsoft.graph.auditResource",
      "displayName": "String",
      "modifiedProperties": [
          "@odata.type": "microsoft.graph.auditProperty",
          "displayName": "String",
          "oldValue": "String",
          "newValue": "String"
      "type": "String",
      "resourceId": "String"
  "category": "String"