Microsoft Purview compliance portal: Audit – New Exchange and SharePoint Logs for Microsoft Purview Audit Standard Users

Originally posted by Microsoft Jan 30, 2024 Uncategorized 0 Comments

Microsoft Purview is expanding access to wider cloud security activity events for Microsoft Exchange and SharePoint. As part of the changes, standard users of Purview Audit will begin to generate four new Microsoft Exchange and SharePoint events that were previously generated only for Audit Premium licensed users: MailItemsAccessed, Send, SearchQueryInitiatedExchange, and SearchQueryInitiatedSharepoint. The following logs will differ based on the user’s license and additional metadata will be added to Exchange logs when the user is assigned an Audit Premium license: SensitivityLabel for MailItemsAccessed.

Product
Release phase	Preview
Release date	June CY2024 Preview date: February CY2024
Platform	Web
Cloud Instance	GCC, GCC High, DoD
Created	2024-01-30
Roadmap ID	380690
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=380690