Skip to main content
🦉
Message CenterMicrosoft 365 Updates
HomePermissionsTenant FinderPortfolio
🦉
M365 Message Centerby Cengiz YILMAZ

Track the latest updates, features, and announcements for Microsoft 365 services. Comprehensive archive of service updates and important changes.

Quick Links

HomePermissionsTenant FinderPortfolio

Connect

© 2026 M365 Message Center. Created with ❤️ by Cengiz YILMAZ

Data sourced from Microsoft 365 Message Center • Not affiliated with Microsoft

  1. Home
  2. /
  3. MC720778

Microsoft Purview: Audit Search with Microsoft Graph API

Informational

Message ID

MC720778
View in Admin Center

Roadmap ID

117587
View in Roadmap

Services

Microsoft 365 suite
Microsoft Purview

Affected Platforms

Web

Summary

Microsoft Purview will have a new Audit Log Query API available through Microsoft Graph API, allowing admins to programmatically access audit logs. Rollout will begin in late June 2024 and is expected to complete by mid-July 2024. To access the new API, register your application with Microsoft Graph and add relevant permissions. Notify users and update documentation as necessary. Microsoft Purview Audit enables centralized visualization of cloud log data for security events, forensic investigations, internal investigations, and compliance obligations.

Details

Updated June 21, 2024: We have updated the rollout timeline below. Thank you for your patience.

Microsoft Graph offers a unified API endpoint for accessing data from multiple Microsoft cloud services in a single response. This feature provides a new Audit Log Query API for Microsoft Purview that enables you to create applications that programmatically query and retrieve your organization’s audit activity logs.

This message is associated with Microsoft 365 Roadmap ID 117587.

When this will happen:

Worldwide: Rollout will begin in late June 2024 (previously late May) and is expected to complete by mid-July 2024 (previously early July).

How this will affect your organization:

Admins in your organization with access to search the audit log will be able to programmatically access the audit logs through the new Audit Log Query Graph API.

What you need to do to prepare:

To access the new Audit Log Query Graph API, register your application with Microsoft Graph and add the relevant Graph permissions.

You may want to notify your users about this change and update any relevant documentation as appropriate.

Microsoft Purview Audit enables customers to centrally visualize cloud log data generated across their enterprise, thus helping them effectively respond to security events, forensic investigations, internal investigations and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded, and retained in customers' unified Microsoft Purview audit logs.

Resources

  • Learn about Microsoft Purview Audit
  • Access to search the Audit log in Get started with auditing solutions | Microsoft Learn
  • Register your application with Microsoft Graph in Use the Microsoft Graph API - Microsoft Graph | Microsoft Learn
  • Learn more about Use the Microsoft Graph API - Microsoft Graph | Microsoft Learn



Timeline

📅
Published
Feb 28, 2024
Message published to Message Center
✏️
Updated
Jun 21, 2024
Message content updated
🏁
End Date
Sep 2, 2024
Message timeline ends

Tags

#Updated message#New feature#Admin impact

Category

📖Stay Informed

Related Messages

Similar updates

MC759457

Endpoint Data Loss Prevention - Enhanced privacy control: Limiting PII data access in Activity Explorer

Mar 27, 2024
MC713369

Information Protection - Save filters for Microsoft 365 Activity Explorer

Feb 6, 2024
MC776192

Microsoft Purview | New eDiscovery Hold reports

Apr 12, 2024
MC791114

Data Loss Prevention: Decoupling policy tips and email notifications for SharePoint and OneDrive

May 8, 2024
MC791110

Microsoft Purview | Data Lifecycle Management: New integration with Adaptive protection

May 8, 2024