All clients
Compare any report across every client you look after.
Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.
| When (UTC) | Change | By | Target | Detail | Result | IP address |
|---|---|---|---|---|---|---|
| 10 Oct 2026, 18:36 medium | Update application – Certificates and secrets management | admin@contoso.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| 10 Oct 2026, 06:36 medium | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| 9 Oct 2026, 06:36 medium | Add eligible member to role in PIM completed (permanent) | admin@contoso.example | annabel.fraser@ | Exchange Administrator | Succeeded | 203.0.113.40 |
| 8 Oct 2026, 18:36 | Reset user password | admin@contoso.example | annabel.fraser@ | Succeeded | 203.0.113.40 | |
| 8 Oct 2026, 06:36 | Remove member from role | admin@contoso.example | old.admin@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| 7 Oct 2026, 18:36 | Admin registered security info | admin@contoso.example | annabel.fraser@ | Succeeded | 203.0.113.40 | |
| 7 Oct 2026, 06:36 medium | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| 6 Oct 2026, 06:36 | Add conditional access policy | admin@contoso.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| 5 Oct 2026, 18:36 medium | Delete conditional access policy | admin@contoso.example | Block risky countries | Succeeded | 203.0.113.40 | |
| 4 Oct 2026, 06:36 | Update application – Certificates and secrets management | admin@contoso.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| 3 Oct 2026, 06:36 | Consent to application | admin@contoso.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| 3 Oct 2026, 04:12 | Add app role assignment to service principal | admin@contoso.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| 2 Oct 2026, 06:36 | Delete user | admin@contoso.example | leaver0@contoso.example, leaver1@contoso.example, leaver2@contoso.example, leaver3@contoso.example, leaver4@contoso.example and 2 more | Succeeded | 203.0.113.40 | |
| 30 Sep 2026, 06:36 medium | Update application – Certificates and secrets management | admin@contoso.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| 30 Sep 2026, 06:36 | Verify domain | admin@contoso.example | new.contoso.example | Succeeded | 203.0.113.40 | |
| 1 Sep 2026, 06:36 medium | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| 9 Aug 2026, 06:36 medium | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| 14 Jul 2026, 06:36 | Add conditional access policy | admin@contoso.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| 10 Oct 2026, 18:36 medium | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| 10 Oct 2026, 06:36 medium | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| 9 Oct 2026, 06:36 medium | Add eligible member to role in PIM completed (permanent) | admin@fabrikam.example | anna.kowalski@ | Exchange Administrator | Succeeded | 203.0.113.40 |
| 8 Oct 2026, 18:36 | Reset user password | admin@fabrikam.example | anna.kowalski@ | Succeeded | 203.0.113.40 | |
| 8 Oct 2026, 06:36 | Remove member from role | admin@fabrikam.example | old.admin@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| 7 Oct 2026, 18:36 | Admin registered security info | admin@fabrikam.example | anna.kowalski@ | Succeeded | 203.0.113.40 | |
| 7 Oct 2026, 06:36 medium | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| 6 Oct 2026, 06:36 | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| 5 Oct 2026, 18:36 medium | Delete conditional access policy | admin@fabrikam.example | Block risky countries | Succeeded | 203.0.113.40 | |
| 4 Oct 2026, 06:36 | Update application – Certificates and secrets management | admin@fabrikam.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| 3 Oct 2026, 06:36 | Consent to application | admin@fabrikam.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| 3 Oct 2026, 04:12 | Add app role assignment to service principal | admin@fabrikam.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| 2 Oct 2026, 06:36 | Delete user | admin@fabrikam.example | leaver0@fabrikam.example, leaver1@fabrikam.example, leaver2@fabrikam.example, leaver3@fabrikam.example, leaver4@fabrikam.example and 2 more | Succeeded | 203.0.113.40 | |
| 30 Sep 2026, 06:36 medium | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| 30 Sep 2026, 06:36 | Verify domain | admin@fabrikam.example | new.fabrikam.example | Succeeded | 203.0.113.40 | |
| 1 Sep 2026, 06:36 medium | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| 9 Aug 2026, 06:36 medium | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| 14 Jul 2026, 06:36 | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| 10 Oct 2026, 18:36 medium | Update application – Certificates and secrets management | admin@ | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| 10 Oct 2026, 06:36 medium | Add member to role | admin@ | robert.hughes@ | Global Administrator | Succeeded | 203.0.113.40 |
| 9 Oct 2026, 06:36 medium | Add eligible member to role in PIM completed (permanent) | admin@ | ann.patel@ | Exchange Administrator | Succeeded | 203.0.113.40 |
| 8 Oct 2026, 18:36 | Reset user password | admin@ | ann.patel@ | Succeeded | 203.0.113.40 | |
| 8 Oct 2026, 06:36 | Remove member from role | admin@ | old.admin@ | Global Administrator | Succeeded | 203.0.113.40 |
| 7 Oct 2026, 18:36 | Admin registered security info | admin@ | ann.patel@ | Succeeded | 203.0.113.40 | |
| 7 Oct 2026, 06:36 medium | Update conditional access policy | admin@ | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| 6 Oct 2026, 06:36 | Add conditional access policy | admin@ | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| 5 Oct 2026, 18:36 medium | Delete conditional access policy | admin@ | Block risky countries | Succeeded | 203.0.113.40 | |
| 4 Oct 2026, 06:36 | Update application – Certificates and secrets management | admin@ | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| 3 Oct 2026, 06:36 | Consent to application | admin@ | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| 3 Oct 2026, 04:12 | Add app role assignment to service principal | admin@ | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| 2 Oct 2026, 06:36 | Delete user | admin@ | leaver0@ | Succeeded | 203.0.113.40 | |
| 30 Sep 2026, 06:36 medium | Update application – Certificates and secrets management | admin@ | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| 30 Sep 2026, 06:36 | Verify domain | admin@ | new.northwindtraders.example | Succeeded | 203.0.113.40 | |
| 1 Sep 2026, 06:36 medium | Update conditional access policy | admin@ | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| 9 Aug 2026, 06:36 medium | Add member to role | admin@ | robert.hughes@ | Global Administrator | Succeeded | 203.0.113.40 |
| 14 Jul 2026, 06:36 | Add conditional access policy | admin@ | Block legacy authentication | On | Succeeded | 203.0.113.40 |
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.