title | description | author | localization_priority | ms.subservice | doc_type |
---|---|---|---|---|---|
List auditEvents |
List properties and relationships of the auditEvent objects. |
jaiprakashmb |
Normal |
intune |
apiPageType |
Namespace: microsoft.graph
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
List properties and relationships of the auditEvent objects.
[!INCLUDE national-cloud-support]
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from least to most privileged) |
---|---|
Delegated (work or school account) | DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. |
Application | DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All |
GET /deviceManagement/auditEvents
Header | Value |
---|---|
Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Accept | application/json |
Do not supply a request body for this method.
If successful, this method returns a 200 OK
response code and a collection of auditEvent objects in the response body.
Here is an example of the request.
GET https://graph.microsoft.com/v1.0/deviceManagement/auditEvents
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 1746
{
"value": [
{
"@odata.type": "#microsoft.graph.auditEvent",
"id": "59653ce8-3ce8-5965-e83c-6559e83c6559",
"displayName": "Display Name value",
"componentName": "Component Name value",
"actor": {
"@odata.type": "microsoft.graph.auditActor",
"type": "Type value",
"auditActorType": "Audit Actor Type value",
"userPermissions": [
"User Permissions value"
],
"applicationId": "Application Id value",
"applicationDisplayName": "Application Display Name value",
"userPrincipalName": "User Principal Name value",
"servicePrincipalName": "Service Principal Name value",
"ipAddress": "Ip Address value",
"userId": "User Id value"
},
"activity": "Activity value",
"activityDateTime": "2016-12-31T23:59:51.6363086-08:00",
"activityType": "Activity Type value",
"activityOperationType": "Activity Operation Type value",
"activityResult": "Activity Result value",
"correlationId": "52effe71-fe71-52ef-71fe-ef5271feef52",
"resources": [
{
"@odata.type": "microsoft.graph.auditResource",
"displayName": "Display Name value",
"modifiedProperties": [
{
"@odata.type": "microsoft.graph.auditProperty",
"displayName": "Display Name value",
"oldValue": "Old Value value",
"newValue": "New Value value"
}
],
"type": "Type value",
"auditResourceType": "Audit Resource Type value",
"resourceId": "Resource Id value"
}
],
"category": "Category value"
}
]
}