Updated June 14,August 1, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Purview auditing solutions provides an integrated approach to help organizations effectively address security incidents, forensic and internal investigations, and compliance requirements. Thousands of user and admin operations performed in various of Microsoft 365 services and solutions are captured, recorded, and retained in your organization's unified audit log.
With this release, the Microsoft Purview audit solution will begin to log the activities conducted by security administrators as well.
This message is associated with Microsoft 365 Roadmap ID 385346
When this will happen:
Public Preview: We will begin rolling out late Juneearly July 2024 (previously late May)June) and expect to complete by earlylate July 2024 (previously mid-June)early July).
General Availability (Worldwide): We will begin rolling out early JulyAugust 2024 (previously mid-June)early July) and expect to complete by late JulyAugust 2024 (previously late June)July).
How this will affect your organization:
Microsoft Purview auditing solutions will now log activities such as submitting an audit search query, enabling or disabling auditing, creating or modifying audit log retention policies, etc.
What you need to do to prepare:
You do not need to take any action to start logging these new audit activities.
Additional resources: