All clients
Compare any report across every client you look after.
Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.
| Client | Area | Change | By | Target | Detail | Result | IP address |
|---|---|---|---|---|---|---|---|
| Contoso Legal LLP medium | Apps | Add service principal credentials | Contoso Automation | Mail Sync Pro | Credential added | Succeeded | |
| Contoso Legal LLP | Admin roles | Add member to role | mallory.hart@contoso.example | mallory.hart@contoso.example | Global Administrator | Failed: Insufficient privileges | 203.0.113.9 |
| Contoso Legal LLP medium | Apps | Update application – Certificates and secrets management | admin@contoso.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Admin roles | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP high | Domains | Set domain authentication | mallory.hart@contoso.example | contoso.example | Succeeded | 203.0.113.9 | |
| Contoso Legal LLP medium | Admin roles | Add eligible member to role in PIM completed (permanent) | admin@contoso.example | annabel.fraser@contoso.example | Exchange Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Accounts | Reset user password | admin@contoso.example | annabel.fraser@contoso.example | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP | Admin roles | Remove member from role | admin@contoso.example | old.admin@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Accounts | Admin registered security info | admin@contoso.example | annabel.fraser@contoso.example | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP medium | Conditional Access | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Conditional Access | Add conditional access policy | admin@contoso.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Conditional Access | Delete conditional access policy | admin@contoso.example | Block risky countries | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP | Apps | Update application – Certificates and secrets management | admin@contoso.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Apps | Consent to application | admin@contoso.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Apps | Add app role assignment to service principal | admin@contoso.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Accounts | Delete user | admin@contoso.example | leaver0@contoso.example, leaver1@contoso.example, leaver2@contoso.example, leaver3@contoso.example, leaver4@contoso.example and 2 more | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP | Partners | Add partner to company | Partner Center | Contoso IT Services | Succeeded | ||
| Contoso Legal LLP medium | Apps | Update application – Certificates and secrets management | admin@contoso.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Domains | Verify domain | admin@contoso.example | new.contoso.example | Succeeded | 203.0.113.40 | |
| Contoso Legal LLP medium | Conditional Access | Update conditional access policy | admin@contoso.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Contoso Legal LLP medium | Admin roles | Add member to role | admin@contoso.example | bobby.marsh@contoso.example | Global Administrator | Succeeded | 203.0.113.40 |
| Contoso Legal LLP | Conditional Access | Add conditional access policy | admin@contoso.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Apps | Add service principal credentials | Contoso Automation | Mail Sync Pro | Credential added | Succeeded | |
| Fabrikam Dental Group | Admin roles | Add member to role | mallory.quinn@fabrikam.example | mallory.quinn@fabrikam.example | Global Administrator | Failed: Insufficient privileges | 203.0.113.9 |
| Fabrikam Dental Group medium | Apps | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Admin roles | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group high | Domains | Set domain authentication | mallory.quinn@fabrikam.example | fabrikam.example | Succeeded | 203.0.113.9 | |
| Fabrikam Dental Group medium | Admin roles | Add eligible member to role in PIM completed (permanent) | admin@fabrikam.example | anna.kowalski@fabrikam.example | Exchange Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Accounts | Reset user password | admin@fabrikam.example | anna.kowalski@fabrikam.example | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group | Admin roles | Remove member from role | admin@fabrikam.example | old.admin@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Accounts | Admin registered security info | admin@fabrikam.example | anna.kowalski@fabrikam.example | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group medium | Conditional Access | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Conditional Access | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Conditional Access | Delete conditional access policy | admin@fabrikam.example | Block risky countries | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group | Apps | Update application – Certificates and secrets management | admin@fabrikam.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Apps | Consent to application | admin@fabrikam.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Apps | Add app role assignment to service principal | admin@fabrikam.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Accounts | Delete user | admin@fabrikam.example | leaver0@fabrikam.example, leaver1@fabrikam.example, leaver2@fabrikam.example, leaver3@fabrikam.example, leaver4@fabrikam.example and 2 more | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group | Partners | Add partner to company | Partner Center | Contoso IT Services | Succeeded | ||
| Fabrikam Dental Group medium | Apps | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Domains | Verify domain | admin@fabrikam.example | new.fabrikam.example | Succeeded | 203.0.113.40 | |
| Fabrikam Dental Group medium | Conditional Access | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group medium | Admin roles | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Global Administrator | Succeeded | 203.0.113.40 |
| Fabrikam Dental Group | Conditional Access | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Apps | Add service principal credentials | Contoso Automation | Mail Sync Pro | Credential added | Succeeded | |
| Northwind Traders | Admin roles | Add member to role | mallory.price@northwindtraders.example | mallory.price@northwindtraders.example | Global Administrator | Failed: Insufficient privileges | 203.0.113.9 |
| Northwind Traders medium | Apps | Update application – Certificates and secrets management | admin@northwindtraders.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Admin roles | Add member to role | admin@northwindtraders.example | robert.hughes@northwindtraders.example | Global Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders high | Domains | Set domain authentication | mallory.price@northwindtraders.example | northwindtraders.example | Succeeded | 203.0.113.9 | |
| Northwind Traders medium | Admin roles | Add eligible member to role in PIM completed (permanent) | admin@northwindtraders.example | ann.patel@northwindtraders.example | Exchange Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders | Accounts | Reset user password | admin@northwindtraders.example | ann.patel@northwindtraders.example | Succeeded | 203.0.113.40 | |
| Northwind Traders | Admin roles | Remove member from role | admin@northwindtraders.example | old.admin@northwindtraders.example | Global Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders | Accounts | Admin registered security info | admin@northwindtraders.example | ann.patel@northwindtraders.example | Succeeded | 203.0.113.40 | |
| Northwind Traders medium | Conditional Access | Update conditional access policy | admin@northwindtraders.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Northwind Traders | Conditional Access | Add conditional access policy | admin@northwindtraders.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Conditional Access | Delete conditional access policy | admin@northwindtraders.example | Block risky countries | Succeeded | 203.0.113.40 | |
| Northwind Traders | Apps | Update application – Certificates and secrets management | admin@northwindtraders.example | Old Integration | Removed secret | Succeeded | 203.0.113.40 |
| Northwind Traders | Apps | Consent to application | admin@northwindtraders.example | Mail Sync Pro | Admin consent for everyone: Mail.Read User.Read | Succeeded | 203.0.113.40 |
| Northwind Traders | Apps | Add app role assignment to service principal | admin@northwindtraders.example | Mail Sync Pro | Mail.ReadWrite on Microsoft Graph | Succeeded | 203.0.113.40 |
| Northwind Traders | Accounts | Delete user | admin@northwindtraders.example | leaver0@northwindtraders.example, leaver1@northwindtraders.example, leaver2@northwindtraders.example, leaver3@northwindtraders.example, leaver4@northwindtraders.example and 2 more | Succeeded | 203.0.113.40 | |
| Northwind Traders | Partners | Add partner to company | Partner Center | Contoso IT Services | Succeeded | ||
| Northwind Traders medium | Apps | Update application – Certificates and secrets management | admin@northwindtraders.example | Payroll Sync | Added certificate | Succeeded | 203.0.113.40 |
| Northwind Traders | Domains | Verify domain | admin@northwindtraders.example | new.northwindtraders.example | Succeeded | 203.0.113.40 | |
| Northwind Traders medium | Conditional Access | Update conditional access policy | admin@northwindtraders.example | Require MFA for all users | On → Off | Succeeded | 203.0.113.40 |
| Northwind Traders medium | Admin roles | Add member to role | admin@northwindtraders.example | robert.hughes@northwindtraders.example | Global Administrator | Succeeded | 203.0.113.40 |
| Northwind Traders | Conditional Access | Add conditional access policy | admin@northwindtraders.example | Block legacy authentication | On | Succeeded | 203.0.113.40 |
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.