Share via

How to retrieve audit log events for SharePoint Plans using Graph Purview API (beta)

eggy mcegg 100 Reputation points
2024-10-16T15:59:58.2166667+00:00

Screenshot from 2024-10-16 16-52-07

I have a requirement where I need to verify if a Plan gets created, a Task gets added to said plan, a Task gets deleted and a Task gets assigned.

I am attempting to do this using the Purview API (via Graph API) but am not getting any responses with regards to

  • TaskRead
  • TaskCreated
  • TaskModified
  • TaskDeleted
  • TaskAssigned

I create an audit log query, after the query has succeeded I retrieve the records and I do not see any in relation to the Plan (even thought I create Plan with Tasks during the specified time period in the auditLogQuery.

Here https://zcusa.951200.xyz/en-us/purview/audit-log-activities#microsoft-project-for-the-web-activities

It talks about Microsoft Project. I am a bit confused as to what service to call/use to get these audit logs.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
12,092 questions
SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,731 questions
Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,190 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ling Zhou_MSFT 17,235 Reputation points Microsoft Vendor
    2024-10-17T06:24:02.16+00:00

    Hi @eggy mcegg,

    Thank you for posting in this community.

    Unfortunately, there is no Api in Graph Api about retrieving audit log events for SharePoint plans.

    However, you can log in to the Microsoft compliance portal to get audit log events for SharePoint Plans.

    User's image

    • Start a new search in the unified audit log.

    User's image

    This auditing capabilities capture activities in Planner that include read, created, modified, copied or deleted for a plan, task or roster, and also, capture record types such as PlannerTask, PlannerPlan PlannerCopyPlan. Since SharePoint Plans are implemented using Microsoft Planner, it is also included.

    You can review the full list of Planner user and admin activities logged for auditing and the Planner schema. 

    Reference: Auditing capabilities coming to Microsoft Project, Microsoft Planner, and Microsoft To Do

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.