auditActivityInitiator resource type

Namespace: microsoft.graph Identity the resource object that initiates the activity. The initiator can be a user, an app or a system (which is considered as an app)

Properties

Property	Type	Description
app	appIdentity	If the actor initiating the activity is an app, this property indicates all its identification information including appId, displayName, servicePrincipalId, and servicePrincipalName.
user	auditUserIdentity	If the actor initiating the activity is a user, this property indicates their identification information including their id, displayName, and userPrincipalName.

JSON representation

The following is a JSON representation of the resource.

{
  "app": {"@odata.type": "microsoft.graph.appIdentity"},
  "user": {"@odata.type": "microsoft.graph.userIdentity"}
}