Published Oct 7, 2023
Microsoft Purview is introducing a new Audit Log Query API that allows customers to programmatically query and retrieve their organization's Audit activity logs. Admins with access to search the Audit log will be able to access the audit logs through the new Audit Log Query Graph API. To access the new API, customers need to register their application with Microsoft Graph and add the relevant Graph permissions. The rollout is expected to begin in early January 2024 for Preview and late May 2024 worldwide.
Updated March 15, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Graph offers a unified API endpoint for accessing data from multiple Microsoft cloud services in a single response. This feature provides a new Audit Log Query API that enables our customers to create applications to programmatically query and retrieve their organization’s Audit activity logs.
This message is associated with Microsoft 365 Roadmap ID 117587
When this will happen:
Preview: Rollout will begin in early January 2024 (previously mid-December) and is expected to be complete by late February 2024 (previously mid-December).
Worldwide: Rollout will begin in late May 2024 (previously late March) and is expected to complete by mid-June 2024 (previously mid-April).
How this will affect your organization:
Admins in your organization with access to search the Audit log will be able to programmatically access the audit logs through the new Audit Log Query Graph API.
What you need to do to prepare:
To access the new Audit Log Query Graph API, you need to register your application with Microsoft Graph and add the relevant Graph permissions.
Microsoft Purview Audit enables customers to centrally visualize cloud log data generated across their enterprise, thus helping them effectively respond to security events, forensic investigations, internal investigations and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded and retained in customers unified Microsoft Purview Audit logs.
Learn more: