Microsoft Azure reports

S. No	Report Title	Details Provided
1	User based activity	Recent user activity Creation, deletion and updating of resources by users Unsuccessful events by users
2	IP address based activity	Recent activities based on IP addresses Creation, deletion and updating of resources based on IP addresses Unsuccessful events based on IP addresses
3	Permission changes	The user who performed the permission changes The Source IP from which the permission changes were made The resources to which the permission changes were made
4	Network Security Groups	Rule changes for network security groups NSG permission changes Creation and deletion of network security groups NSG network interface changes
5	Virtual networks	Network permission changes Subnet changes based on virtual networks
6	Application gateways	Permission changes made to the application gateway Update operations based on application gateway
7	DNS	DNS zones- Creation, deletion, and permission changes DNS nodes- Creation, deletion, and modification
8	Traffic manager	Permission changes made to the traffic manager Configuration changes based on the traffic manager Endpoints created, modified and deleted based on the traffic manager
9	Public IP address	Public IP address permission changes made Public IP address configuration changes made
10	Compute	The following actions performed on virtual machines is recorded: Creation, deletion, starting, stopping, restarting and modification
11	Database	Database server permission changes Database server firewall changes Created, deleted and modified databases Document DBs that have been created, deleted and updated Regenerated Document DB keys
12	Storage accounts	Storage account permission changes Access keys created by the storage account Created and deleted storage accounts
13	Resource locks	Locked and unlocked resource events