Monitor security configuration history

Events done on the security configuration are logged in the security history. So, you can monitor the changes to the security configuration.

These events are logged:

Security configuration element	Event logged
Azure AD group	Created Deleted Modified
Audit log	Cleanup executed Initialized
Duty	Access to sensitive data given Access to sensitive data undone Created Deleted Modified
Dynamic snapshot	Auto-updated Created
Entry point	Access to sensitive data given Access to sensitive data undone Created Deleted Modified
Form control permission	Modified
Objects	Published
Privilege	Access to sensitive data given Access to sensitive data undone Created Deleted Modified
Role	Access to sensitive data given Access to sensitive data undone Activated Assigned (with and without date range) Assigned dynamically Created Deleted Inactivated Locked Merged Modified (with and without date range) Removed Removed dynamically Unlocked Expired (due to date range) Temporary access granted or extended by workflow
Security configuration	Exported Imported
Security explorer	Used
Security request	Approved Created Rejected
Sensitive data setup	Exported Imported
Snapshot	Compared
SoD rule	Created Deleted Modified Validated
SoD conflict validation override	Allowed Denied
Stand-in role	Assigned Removed
Stand-in rule	Applied Conflict Created Deleted
User	Access to sensitive data given Access to sensitive data undone Created Deleted Disabled Enabled Disabled via security request Enabled via security request Modified

Documentation Index