New Audit Events Capture User Access to Purview Solutions
New audit events are always welcome if they provide additional insight into what happens inside Microsoft 365. Two events are now available to track access to Purview solutions. The events covered access on a non-scoped or scoped basis and show what roles are needed to access the intended target (a Purview solution like eDiscovery). Some PowerShell extracts the new events from the unified audit log to analyze their contents.