Fabrikam Dental Group
fabrikam.onmicrosoft.com
Changes in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log that are worth confirming with the client: domain sign-in (federation) changes, new app secrets and certificates, admin roles granted, and Conditional Access policies deleted or switched off. Failed attempts are left out.
| When (UTC) | Change | By | Target | Detail |
|---|---|---|---|---|
| 10 Oct 2026, 05:16 high | Set domain authentication | mallory.quinn@ | fabrikam.example | |
Why it matters: Changes how users of a domain sign in; a rogue federation lets someone sign in as anyone | ||||
Every admin role, Conditional Access, policy, app, domain and account change in the 120 days since 14 Jun 2026, when Office Sentry started keeping this tenant's audit log, newest first.
| When (UTC) | Change | By | Target | Result |
|---|---|---|---|---|
| 12 Oct 2026, 05:16 medium | Add service principal credentials | Contoso Automation | Mail Sync Pro | Succeeded |
| 11 Oct 2026, 17:16 | Add member to role | mallory.quinn@ | mallory.quinn@ | Failed: Insufficient privileges |
| 11 Oct 2026, 05:16 medium | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Succeeded |
| 10 Oct 2026, 17:16 medium | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Succeeded |
| 10 Oct 2026, 05:16 high | Set domain authentication | mallory.quinn@ | fabrikam.example | Succeeded |
| 9 Oct 2026, 17:16 medium | Add eligible member to role in PIM completed (permanent) | admin@fabrikam.example | anna.kowalski@ | Succeeded |
| 9 Oct 2026, 05:16 | Reset user password | admin@fabrikam.example | anna.kowalski@ | Succeeded |
| 8 Oct 2026, 17:16 | Remove member from role | admin@fabrikam.example | old.admin@fabrikam.example | Succeeded |
| 8 Oct 2026, 05:16 | Admin registered security info | admin@fabrikam.example | anna.kowalski@ | Succeeded |
| 7 Oct 2026, 17:16 medium | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | Succeeded |
| 6 Oct 2026, 17:16 | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | Succeeded |
| 6 Oct 2026, 05:16 medium | Delete conditional access policy | admin@fabrikam.example | Block risky countries | Succeeded |
| 4 Oct 2026, 17:16 | Update application – Certificates and secrets management | admin@fabrikam.example | Old Integration | Succeeded |
| 3 Oct 2026, 17:16 | Consent to application | admin@fabrikam.example | Mail Sync Pro | Succeeded |
| 3 Oct 2026, 14:52 | Add app role assignment to service principal | admin@fabrikam.example | Mail Sync Pro | Succeeded |
| 2 Oct 2026, 17:16 | Delete user | admin@fabrikam.example | leaver0@fabrikam.example, leaver1@fabrikam.example, leaver2@fabrikam.example, leaver3@fabrikam.example, leaver4@fabrikam.example and 2 more | Succeeded |
| 1 Oct 2026, 17:16 | Add partner to company | Partner Center | Contoso IT Services | Succeeded |
| 30 Sep 2026, 17:16 medium | Update application – Certificates and secrets management | admin@fabrikam.example | Payroll Sync | Succeeded |
| 30 Sep 2026, 17:16 | Verify domain | admin@fabrikam.example | new.fabrikam.example | Succeeded |
| 1 Sep 2026, 17:16 medium | Update conditional access policy | admin@fabrikam.example | Require MFA for all users | Succeeded |
| 9 Aug 2026, 17:16 medium | Add member to role | admin@fabrikam.example | ben.okafor@fabrikam.example | Succeeded |
| 14 Jul 2026, 17:16 | Add conditional access policy | admin@fabrikam.example | Block legacy authentication | Succeeded |
Everyone (and every app) that made one of the changes above, most active first.
| Who | Type | Changes | Last change (UTC) |
|---|---|---|---|
| admin@fabrikam.example | User | 18 | 11 Oct 2026, 05:16 |
| mallory.quinn@ | User | 2 | 11 Oct 2026, 17:16 |
| Contoso Automation | App | 1 | 12 Oct 2026, 05:16 |
| Partner Center | App | 1 | 1 Oct 2026, 17:16 |
Data from Admin activity ().