Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Northwind Traders

Northwind Traders

northwindtraders.onmicrosoft.com
Monthly review

Admin activity

Admin roles, Conditional Access, app credentials, consents, domains and account changes from the directory audit log, and who made them.

All clients
Download PDFXLSX
Changes to review 10All admin changes 1Who made changes 4

Changes to review 10

10 to review CSV

Changes in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log that are worth confirming with the client: domain sign-in (federation) changes, new app secrets and certificates, admin roles granted, and Conditional Access policies deleted or switched off. Failed attempts are left out.

ChangeByTargetDetailWhy it matters
Set domain authentication highmallory.price@northwindtraders.examplenorthwindtraders.exampleChanges how users of a domain sign in; a rogue federation lets someone sign in as anyone
Add service principal credentials mediumContoso AutomationMail Sync ProCredential addedNew secret or certificate: whoever holds it can sign in as the app
Update application – Certificates and secrets management mediumadmin@northwindtraders.examplePayroll SyncAdded certificateNew secret or certificate: whoever holds it can sign in as the app
Add member to role mediumadmin@northwindtraders.examplerobert.hughes@northwindtraders.exampleGlobal AdministratorAdmin role granted
Add eligible member to role in PIM completed (permanent) mediumadmin@northwindtraders.exampleann.patel@northwindtraders.exampleExchange AdministratorAdmin role granted
Update conditional access policy mediumadmin@northwindtraders.exampleRequire MFA for all usersOn → OffConditional Access policy no longer enforced
Delete conditional access policy mediumadmin@northwindtraders.exampleBlock risky countriesConditional Access policy deleted
Update application – Certificates and secrets management mediumadmin@northwindtraders.examplePayroll SyncAdded certificateNew secret or certificate: whoever holds it can sign in as the app
Update conditional access policy mediumadmin@northwindtraders.exampleRequire MFA for all usersOn → OffConditional Access policy no longer enforced
Add member to role mediumadmin@northwindtraders.examplerobert.hughes@northwindtraders.exampleGlobal AdministratorAdmin role granted

All admin changes 1 of 22

10 to review CSV

Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.

Target: Block risky countriesRemove Clear filters
When (UTC)ChangeByTargetDetailResult
6 Oct 2026, 05:16 mediumDelete conditional access policyadmin@northwindtraders.exampleBlock risky countriesSucceeded

Who made changes 4

CSV

Everyone (and every app) that made one of the changes above, most active first.

WhoTypeChangesLast change (UTC)
admin@northwindtraders.exampleUser1811 Oct 2026, 05:16
mallory.price@northwindtraders.exampleUser211 Oct 2026, 17:16
Contoso AutomationApp112 Oct 2026, 05:16
Partner CenterApp11 Oct 2026, 17:16

Data from Admin activity ().