New Audit Preview Added to Azure Active Directory Admin Portal

Microsoft has added auditing features to its Azure Active Directory admin portal for administrators, which is still at the preview stage from its initial preview launch in September.

The Azure admin portal preview now has options to view audit and sign-in logs, which is a new preview capability that was announced on Tuesday. Filters can be used to refine the details. It's possible to see user and application activities using the auditing preview. The preview can produce graphs and charts for a visual showing of the log data.

It's also possible to use search to filter information using the new audit preview. A search can be based on the user's principal name, date and time, activity and activity type. For instance, the sign-in activity of a particular user can be viewed over the past 30 days.

The new audit preview will work across all resources in a tenancy, Microsoft's announcement added.

Microsoft is also providing APIs that can pass audit log data to applications. There's an Audit API, which can be used to filter activity log information. A Sign-in API can be tapped by applications to show user sign-in information.

Some new Azure admin portal capabilities will require having an Azure AD Premium subscription in place. The new audit feature could end up having that requirement. Microsoft's announcement wasn't specific on that point.

In other Azure AD news, Microsoft announced earlier this month that it has released previews of new Azure AD PowerShell version 2 cmdlets that can be used to manage dynamic groups. The new cmdlets were a top request by users because organizations previously had to "set rules for the creation and population of these groups using the management UX," Microsoft's announcement explained.

Using Azure AD PowerShell to create managed groups will require having an Azure AD Premium subscription in place.

The preview includes a few new cmdlets. One will create and manage a dynamic group. Another lets IT pros create an Office 365 group. Refresh tokens can be revoked using another cmdlet. In addition, the processing of a group can be paused or modified using PowerShell parameters.

Microsoft has also begun establishing a new naming convention for these PowerShell cmdlets. If the cmdlet calls the Microsoft Graph service, it'll get "MS" added in its name. This new naming convention will take effect in a future release, Microsoft indicated.

About the Author

Kurt Mackie is senior news producer for the 1105 Enterprise Computing Group.


  • Secured-Core PCs Promise To Stop Malware at the Firmware Level

    Microsoft and its hardware partners recently described new "Secured-core" PCs, which add protections against firmware-based attacks.

  • How To Ransomware-Proof Your Backups: 4 Key Best Practices

    Backups are the only guaranteed way to save your data after a ransomware attack. Here's how to make sure your backup strategy has ransomware mitigation built right in.

  • Microsoft Buys Mover To Aid Microsoft 365 Shifts

    Microsoft announced on Monday that it bought Mover to help organizations migrate data and shift to using Microsoft 365 services.

  • Microsoft Explains Windows 7 Extended Security Updates Setup Process

    Microsoft this week described installation instructions for volume licensing users of Windows 7 Service Pack 1 to get Extended Security Updates (ESU) activated on PCs.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.