Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Admin activity

Admin roles, Conditional Access, app credentials, consents, domains and account changes from the directory audit log, and who made them.

All clients
Download PDFXLSX

Changes in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log that are worth confirming with the client: domain sign-in (federation) changes, new app secrets and certificates, admin roles granted, and Conditional Access policies deleted or switched off. Failed attempts are left out.

When (UTC)ChangeByTargetDetail
10 Oct 2026, 18:36 mediumUpdate application – Certificates and secrets managementadmin@fabrikam.examplePayroll SyncAdded certificate
Why it matters: New secret or certificate: whoever holds it can sign in as the app
30 Sep 2026, 06:36 mediumUpdate application – Certificates and secrets managementadmin@fabrikam.examplePayroll SyncAdded certificate
Why it matters: New secret or certificate: whoever holds it can sign in as the app

All admin changes 22

10 to review CSV

Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.

When (UTC)ChangeByTargetDetail
11 Oct 2026, 18:36 mediumAdd service principal credentialsContoso AutomationMail Sync ProCredential added
11 Oct 2026, 06:36Add member to rolemallory.quinn@fabrikam.examplemallory.quinn@fabrikam.exampleGlobal Administrator
10 Oct 2026, 18:36 mediumUpdate application – Certificates and secrets managementadmin@fabrikam.examplePayroll SyncAdded certificate
10 Oct 2026, 06:36 mediumAdd member to roleadmin@fabrikam.exampleben.okafor@fabrikam.exampleGlobal Administrator
9 Oct 2026, 18:36 highSet domain authenticationmallory.quinn@fabrikam.examplefabrikam.example
9 Oct 2026, 06:36 mediumAdd eligible member to role in PIM completed (permanent)admin@fabrikam.exampleanna.kowalski@fabrikam.exampleExchange Administrator
8 Oct 2026, 18:36Reset user passwordadmin@fabrikam.exampleanna.kowalski@fabrikam.example
8 Oct 2026, 06:36Remove member from roleadmin@fabrikam.exampleold.admin@fabrikam.exampleGlobal Administrator
7 Oct 2026, 18:36Admin registered security infoadmin@fabrikam.exampleanna.kowalski@fabrikam.example
7 Oct 2026, 06:36 mediumUpdate conditional access policyadmin@fabrikam.exampleRequire MFA for all usersOn → Off
6 Oct 2026, 06:36Add conditional access policyadmin@fabrikam.exampleBlock legacy authenticationOn
5 Oct 2026, 18:36 mediumDelete conditional access policyadmin@fabrikam.exampleBlock risky countries
4 Oct 2026, 06:36Update application – Certificates and secrets managementadmin@fabrikam.exampleOld IntegrationRemoved secret
3 Oct 2026, 06:36Consent to applicationadmin@fabrikam.exampleMail Sync ProAdmin consent for everyone: Mail.Read User.Read
3 Oct 2026, 04:12Add app role assignment to service principaladmin@fabrikam.exampleMail Sync ProMail.ReadWrite on Microsoft Graph
2 Oct 2026, 06:36Delete useradmin@fabrikam.exampleleaver0@fabrikam.example, leaver1@fabrikam.example, leaver2@fabrikam.example, leaver3@fabrikam.example, leaver4@fabrikam.example and 2 more
1 Oct 2026, 06:36Add partner to companyPartner CenterContoso IT Services
30 Sep 2026, 06:36 mediumUpdate application – Certificates and secrets managementadmin@fabrikam.examplePayroll SyncAdded certificate
30 Sep 2026, 06:36Verify domainadmin@fabrikam.examplenew.fabrikam.example
1 Sep 2026, 06:36 mediumUpdate conditional access policyadmin@fabrikam.exampleRequire MFA for all usersOn → Off
9 Aug 2026, 06:36 mediumAdd member to roleadmin@fabrikam.exampleben.okafor@fabrikam.exampleGlobal Administrator
14 Jul 2026, 06:36Add conditional access policyadmin@fabrikam.exampleBlock legacy authenticationOn

Who made changes 4

CSV

Everyone (and every app) that made one of the changes above, most active first.

WhoTypeChangesLast change (UTC)
admin@fabrikam.exampleUser1810 Oct 2026, 18:36
mallory.quinn@fabrikam.exampleUser211 Oct 2026, 06:36
Contoso AutomationApp111 Oct 2026, 18:36
Partner CenterApp11 Oct 2026, 06:36

Data from Admin activity ().