All clients
Compare any report across every client you look after.
Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.
| Client | Change | By | Target | Detail | Result | IP address |
|---|---|---|---|---|---|---|
| Contoso Legal LLP medium | Update application – Certificates and secrets management | admin@contoso.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Add eligible member to role in PIM completed (permanent) | admin@contoso.example | annabel.fraser@ | Exchange Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Reset user password | admin@contoso.example | annabel.fraser@ | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP | Remove member from role | admin@contoso.example | old.admin@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Admin registered security info | admin@contoso.example | annabel.fraser@ | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP medium | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Add conditional access policy | admin@contoso.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Delete conditional access policy | admin@contoso.example | Block risky countries | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP | Update application – Certificates and secrets management | admin@contoso.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Consent to application | admin@contoso.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Add app role assignment to service principal | admin@contoso.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Delete user | admin@contoso.example | leaver0@contoso.example, leaver1@contoso.example, leaver2@contoso.example, leaver3@contoso.example, leaver4@contoso.example and 2 more | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP medium | Update application – Certificates and secrets management | admin@contoso.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Verify domain | admin@contoso.example | new.contoso.example | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP medium | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Add conditional access policy | admin@contoso.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Add eligible member to role in PIM completed (permanent) | admin@fabrikam.example | anna.kowalski@ | Exchange Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Reset user password | admin@fabrikam.example | anna.kowalski@ | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group | Remove member from role | admin@fabrikam.example | old.admin@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Admin registered security info | admin@fabrikam.example | anna.kowalski@ | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group medium | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Delete conditional access policy | admin@fabrikam.example | Block risky countries | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group | Update application – Certificates and secrets management | admin@fabrikam.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Consent to application | admin@fabrikam.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Add app role assignment to service principal | admin@fabrikam.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Delete user | admin@fabrikam.example | leaver0@fabrikam.example, leaver1@fabrikam.example, leaver2@fabrikam.example, leaver3@fabrikam.example, leaver4@fabrikam.example and 2 more | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group medium | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Verify domain | admin@fabrikam.example | new.fabrikam.example | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group medium | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Update application – Certificates and secrets management | admin@ | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Add member to role | admin@ | robert.hughes@ | Global Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Add eligible member to role in PIM completed (permanent) | admin@ | ann.patel@ | Exchange Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders | Reset user password | admin@ | ann.patel@ | Succeeded | 203.0.113.40 | |
| Northwind Traders | Remove member from role | admin@ | old.admin@ | Global Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders | Admin registered security info | admin@ | ann.patel@ | Succeeded | 203.0.113.40 | |
| Northwind Traders medium | Update conditional access policy | admin@ | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Northwind Traders | Add conditional access policy | admin@ | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Delete conditional access policy | admin@ | Block risky countries | Succeeded | 203.0.113.40 | |
| Northwind Traders | Update application – Certificates and secrets management | admin@ | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| Northwind Traders | Consent to application | admin@ | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| Northwind Traders | Add app role assignment to service principal | admin@ | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| Northwind Traders | Delete user | admin@ | leaver0@ | Succeeded | 203.0.113.40 | |
| Northwind Traders medium | Update application – Certificates and secrets management | admin@ | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Northwind Traders | Verify domain | admin@ | new.northwindtraders.example | Succeeded | 203.0.113.40 | |
| Northwind Traders medium | Update conditional access policy | admin@ | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Add member to role | admin@ | robert.hughes@ | Global Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders | Add conditional access policy | admin@ | Block legacy authentication | On | Succeeded | 203.0.113.40 |
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.