Activity history
Fabrikam Dental Group · fabrikam.onmicrosoft.com
Every sign-in and admin change is detailed from 14 Jun 2026.
Up to date as of .
Microsoft keeps 30 days (7 for audit events without Entra ID P1). Office Sentry keeps what it has read for longer, under the retention settings below.
Last 30 days
Sign-ins
2,365
in the last 30 days
Failed
114
5% of sign-ins
Password only
1,205
59% of successful sign-ins skipped MFA
People
55
signed in at least once
Admin changes to review
8
in the last 30 days
Sign-ins per day
The last 90 days, interactive sign-ins only. Hover over a day for its numbers; sign-ins interrupted by an MFA or other prompt are counted there too.
Sign-ins by month
From the daily summaries. Download a month for every sign-in in it, while it's kept.
| Month | Sign-ins | Failed | Used MFA | People | Every sign-in |
|---|---|---|---|---|---|
| Oct 2026 | 843 | 51 | 45% | 55 | CSV |
| Sep 2026 | 2,574 | 119 | 39% | 51 | CSV |
| Aug 2026 | 2,448 | 118 | 40% | 51 | CSV |
| Jul 2026 | 2,605 | 115 | 42% | 51 | CSV |
| Jun 2026 | 1,355 | 47 | 40% | 51 | CSV |
Admin changes to review
10Successful changes in the last 90 days worth a second look. Admin activity has every change.
- mediumAdd service principal credentials: Mail Sync Pro 11 Oct 2026, 16:00 UTC by Contoso Automation · Credential added. New secret or certificate: whoever holds it can sign in as the app.
- mediumUpdate application – Certificates and secrets management: Payroll Sync 10 Oct 2026, 16:00 UTC by admin@fabrikam.example · Added certificate. New secret or certificate: whoever holds it can sign in as the app.
- mediumAdd member to role: ben.okafor@fabrikam.example 10 Oct 2026, 04:00 UTC by admin@fabrikam.example · Global Administrator. Admin role granted.
- highSet domain authentication: fabrikam.example 9 Oct 2026, 16:00 UTC by mallory.quinn@fabrikam.example. Changes how users of a domain sign in; a rogue federation lets someone sign in as anyone.
- mediumAdd eligible member to role in PIM completed (permanent): anna.kowalski@fabrikam.example 9 Oct 2026, 04:00 UTC by admin@fabrikam.example · Exchange Administrator. Admin role granted.
- mediumUpdate conditional access policy: Require MFA for all users 7 Oct 2026, 04:00 UTC by admin@fabrikam.example · On → Off. Conditional Access policy no longer enforced.
- mediumDelete conditional access policy: Block risky countries 5 Oct 2026, 16:00 UTC by admin@fabrikam.example. Conditional Access policy deleted.
- mediumUpdate application – Certificates and secrets management: Payroll Sync 30 Sep 2026, 04:00 UTC by admin@fabrikam.example · Added certificate. New secret or certificate: whoever holds it can sign in as the app.
- mediumUpdate conditional access policy: Require MFA for all users 1 Sep 2026, 04:00 UTC by admin@fabrikam.example · On → Off. Conditional Access policy no longer enforced.
- mediumAdd member to role: ben.okafor@fabrikam.example 9 Aug 2026, 04:00 UTC by admin@fabrikam.example · Global Administrator. Admin role granted.
Kept: every sign-in for 180 days, daily sign-in summaries for 25 months and directory audit events for 7 years.