Skip to main content

​
Entra ID access audit trail

Navigate to idemeum admin portal and access Audit trail section. The logs are stored for the last 30 days on a rolling windows basis. The following events are captured for Entra ID access. Entra account request - when technician navigates to idemeum portal and requests Entra ID account to be enabled or provisioned, we capture an event along with technician email address and the account name that will be provisioned. 
alex@nikpot.com requested access to application Entra 365 onmicrosoft. User account msptech6913@NETORGFT11060369.onmicrosoft.com created.
Entra account disabled - we capture audit events when technician Entra ID accounts are disabled. This happens when configured time for which account needs to stay active passed (default 4 hours). 
System disabled user account msptech6913@NETORGFT11060369.onmicrosoft.com in application Entra 365 onmicrosoft.
Entra account credentials access - audit event is captured when technicians view credentials for Entra ID accounts. 
alex@nikpot.com accessed Entra 365 onmicrosoft credentials.