Published Apr 30, 2024
The Microsoft Purview Compliance portal is introducing new logs for security administrator activities, with a rollout for Public Preview in late June 2024 and General Availability in early July 2024. No action is required to start logging these new activities. Roadmap ID: 385346.
Updated August 1, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Purview auditing solutions provides an integrated approach to help organizations effectively address security incidents, forensic and internal investigations, and compliance requirements. Thousands of user and admin operations performed in various of Microsoft 365 services and solutions are captured, recorded, and retained in your organization's unified audit log.
With this release, the Microsoft Purview audit solution will begin to log the activities conducted by security administrators as well.
This message is associated with Microsoft 365 Roadmap ID 385346
When this will happen:
Public Preview: We will begin rolling out early July 2024 (previously late June) and expect to complete by late July 2024 (previously early July).
General Availability (Worldwide): We will begin rolling out early August 2024 (previously early July) and expect to complete by late August 2024 (previously late July).
How this will affect your organization:
Microsoft Purview auditing solutions will now log activities such as submitting an audit search query, enabling or disabling auditing, creating or modifying audit log retention policies, etc.
What you need to do to prepare:
You do not need to take any action to start logging these new audit activities.
Additional resources: