auditEvent resource type

Namespace: microsoft.graph

Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

A class containing the properties for Audit Event.

Methods

Method Return Type Description
List auditEvents auditEvent collection List properties and relationships of the auditEvent objects.
Get auditEvent auditEvent Read properties and relationships of the auditEvent object.
Create auditEvent auditEvent Create a new auditEvent object.
Delete auditEvent None Deletes a auditEvent.
Update auditEvent auditEvent Update the properties of a auditEvent object.
getAuditCategories function String collection
getAuditActivityTypes function String collection

Properties

Property Type Description
id String Key of the entity.
displayName String Event display name.
componentName String Component name.
actor auditActor AAD user and application that are associated with the audit event.
activity String Friendly name of the activity.
activityDateTime DateTimeOffset The date time in UTC when the activity was performed.
activityType String The type of activity that was being performed.
activityOperationType String The HTTP operation type of the activity.
activityResult String The result of the activity.
correlationId Guid The client request Id that is used to correlate activity within the system.
resources auditResource collection Resources being modified.
category String Audit category.

Relationships

None

JSON Representation

Here is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.auditEvent",
  "id": "String (identifier)",
  "displayName": "String",
  "componentName": "String",
  "actor": {
    "@odata.type": "microsoft.graph.auditActor",
    "type": "String",
    "auditActorType": "String",
    "userPermissions": [
      "String"
    ],
    "applicationId": "String",
    "applicationDisplayName": "String",
    "userPrincipalName": "String",
    "servicePrincipalName": "String",
    "ipAddress": "String",
    "userId": "String",
    "userRoleScopeTags": [
      {
        "@odata.type": "microsoft.graph.roleScopeTagInfo",
        "displayName": "String",
        "roleScopeTagId": "String"
      }
    ],
    "remoteTenantId": "String",
    "remoteUserId": "String"
  },
  "activity": "String",
  "activityDateTime": "String (timestamp)",
  "activityType": "String",
  "activityOperationType": "String",
  "activityResult": "String",
  "correlationId": "Guid",
  "resources": [
    {
      "@odata.type": "microsoft.graph.auditResource",
      "displayName": "String",
      "modifiedProperties": [
        {
          "@odata.type": "microsoft.graph.auditProperty",
          "displayName": "String",
          "oldValue": "String",
          "newValue": "String"
        }
      ],
      "type": "String",
      "auditResourceType": "String",
      "resourceId": "String"
    }
  ],
  "category": "String"
}