How to access and view audit logs for your Office 365 users

Prerequisites

• Applies to: Administrator
• Difficulty: Easy
• Time Needed: Approximately 10 minutes
• Tools Needed: Office 365® Global Administrator access

For more information about prerequisite terminology, see Cloud Office support terminology.

This article lists the steps to access and view the audit logs for your Office 365 organization and users.

View all audit logs for your organization

Use the following steps to view the combined audit logs for all users in your organization:

1. Log in to your Office 365 Control Panel.

2. From the left menu, select Office 365 Admin Center.

3. From the left menu, select Azure Active Directory under Admin centers.

   Note: If you don't see the Admin centers section, you might need to select Show all....

4. Select Azure Active Directory from the left menu, then Audit logs under the Monitoring section.

Note: You can filter your results and change your view by using the Add filters and Columns options.

View audit logs for a specific user

1. Log in to your Office 365 Control Panel.

2. From the left menu, select Office 365 Admin Center.

3. From the left menu, select Azure Active Directory under Admin centers.

   Note: If you don't see the Admin centers section, you might need to select Show all....

4. Select Azure Active Directory from the left menu, then Users.

5. Search for the user you want to view, and then click their name.

6. Select Audit logs from the menu.

Note: You can filter your results and change your view by using the Add filters and Columns options.

Additional resources

To learn more about user activity reports in Office 365, see Find activity reports in the Azure portal.