Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Northwind Traders

Northwind Traders

northwindtraders.onmicrosoft.com
Monthly review

Admin activity

Admin roles, Conditional Access, app credentials, consents, domains and account changes from the directory audit log, and who made them.

All clients
Download PDFXLSX
Changes to review 10All admin changes 3Who made changes 4

Changes to review 10

10 to review CSV

Changes in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log that are worth confirming with the client: domain sign-in (federation) changes, new app secrets and certificates, admin roles granted, and Conditional Access policies deleted or switched off. Failed attempts are left out.

When (UTC)ChangeByTargetDetail
10 Oct 2026, 05:16 highSet domain authenticationmallory.price@northwindtraders.examplenorthwindtraders.example
12 Oct 2026, 05:16 mediumAdd service principal credentialsContoso AutomationMail Sync ProCredential added
11 Oct 2026, 05:16 mediumUpdate application – Certificates and secrets managementadmin@northwindtraders.examplePayroll SyncAdded certificate
10 Oct 2026, 17:16 mediumAdd member to roleadmin@northwindtraders.examplerobert.hughes@northwindtraders.exampleGlobal Administrator
9 Oct 2026, 17:16 mediumAdd eligible member to role in PIM completed (permanent)admin@northwindtraders.exampleann.patel@northwindtraders.exampleExchange Administrator
7 Oct 2026, 17:16 mediumUpdate conditional access policyadmin@northwindtraders.exampleRequire MFA for all usersOn → Off
6 Oct 2026, 05:16 mediumDelete conditional access policyadmin@northwindtraders.exampleBlock risky countries
30 Sep 2026, 17:16 mediumUpdate application – Certificates and secrets managementadmin@northwindtraders.examplePayroll SyncAdded certificate
1 Sep 2026, 17:16 mediumUpdate conditional access policyadmin@northwindtraders.exampleRequire MFA for all usersOn → Off
9 Aug 2026, 17:16 mediumAdd member to roleadmin@northwindtraders.examplerobert.hughes@northwindtraders.exampleGlobal Administrator

All admin changes 3 of 22

10 to review CSV

Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.

Target: ann.patel@northwindtraders.exampleRemove Clear filters
When (UTC)ChangeByTargetDetailResult
9 Oct 2026, 17:16 mediumAdd eligible member to role in PIM completed (permanent)admin@northwindtraders.exampleann.patel@northwindtraders.exampleExchange AdministratorSucceeded
9 Oct 2026, 05:16Reset user passwordadmin@northwindtraders.exampleann.patel@northwindtraders.exampleSucceeded
8 Oct 2026, 05:16Admin registered security infoadmin@northwindtraders.exampleann.patel@northwindtraders.exampleSucceeded

Who made changes 4

CSV

Everyone (and every app) that made one of the changes above, most active first.

WhoTypeChangesLast change (UTC)
admin@northwindtraders.exampleUser1811 Oct 2026, 05:16
mallory.price@northwindtraders.exampleUser211 Oct 2026, 17:16
Contoso AutomationApp112 Oct 2026, 05:16
Partner CenterApp11 Oct 2026, 17:16

Data from Admin activity ().