SharePoint Online auditing tool
SharePoint Online lets you share critical data for collaboration, both inside and outside your organization. However, this means that your user access levels need to be defined and secured. Enterprise environments are vast, which makes securing them a challenge.
M365 Manager Plus makes it easy to enforce security and stay in control of your SharePoint Online environment. It generates audit reports to keep your organization compliant and prevent security breaches.
Audit your SharePoint Online environment at every level
With M365 Manager Plus' granular-level auditing, you can look up audit changes separately for site collections and for sites. View audit changes made to any site collection, such as creation, user addition or removal, and requests for administrator permissions. You can also view audit changes, such as renaming sites, enabling RSS, and sync activities. M365 Manager Plus offers the following categories of reports:

SharePoint file and folder activity reports
Data breaches are either the result of human error or malicious intent. This means that it's crucial to monitor documents that contain sensitive information in order to secure your Microsoft 365 environment. M365 Manager Plus lets you track all the events for any file in your environment. Monitor events including check in or out, copy, move, modify, rename, restore, download, upload, and delete. Additionally, keep an eye on SharePoint list creations and deletions.
- Accessed file
- Checked in file
- Checked out file
- Copied file
- Discarded file checkout
- Restored file
- Uploaded file
- Deleted file
- Downloaded file
- Modified file
- Moved file
- Renamed file
- Changed compliance policy label
- Changed record status to locked
- Changed record status to unlocked
- Deleted record compliance policy label
- Detected document sensitivity mismatch
- File previewed
- Performed search query
- View signalled by client
- Prefetched page
- Extended file accesses
- Deleted file from recycle bin
- Deleted file from second-stage recycle bin
- Detected malware in file
- Recycled all minor versions of file
- Recycled all versions of file
- Recycled version of file
- Viewed page
- Extended page views
- Copied folder
- Created folder
- Deleted folder
- Deleted folder from recycle bin
- Deleted folder from second-stage recycle bin
- Modified folder
- Moved folder
- Renamed folder
- Restored folder
- Recycled file
SharePoint list activity reports
Lists help organize and manage data in a structured way. Tracking changes made to lists and list items helps identify unauthorized access and ensure secure and efficient collaboration. View creations, deletions, updates, and more, with information on when it happened and who made the change.
- Created list
- Created list column
- Created list content type
- Created list item
- Deleted list
- Deleted list column
- Deleted list item
- Recycled list item
- Restored list item
- Updated list
- Updated list column
- Updated list content type
- Updated list item type
- Created site column
- Created site content type
- Deleted site column
- Updated site content type
- Deleted site content type
- Restored list
- Deleted list content type
- Updated site column
- Viewed list item
SharePoint sharing activity reports
With Microsoft 365, you can easily collaborate on data with people outside of your organization, which can make critical data vulnerable to security attacks. M365 Manager Plus' audit reports let you monitor external users and the content to which they have access. This information helps you manage their permission levels on sensitive data.
- Accepted access requests
- Accepted sharing invitations
- Created company-wide share links
- Created access requests
- Created anonymous links
- Created sharing invitations
- Denied access requests
- Deleted company-wide share links
- Deleted anonymous links
- Shared file, folder, or site
- Updated anonymous links
- Used anonymous links
- Unshared file, folder, or site
- Used company-wide share links
- Withdrawn sharing invitations
- Created secure link
- Deleted secure link
- Updated sharing invitation
- Used secure link
- User added to secure link
- User removed from secure link
- Added permission level to site collection
- Blocked sharing invitation
- Updated access request
SharePoint site administration reports
Track SharePoint objects and groups that have been modified, deleted, or renamed. Monitor users who have been added to or removed from a group, and view which users have requested administrator permissions for site collections. Also, track modifications made to site permissions and compare permission levels before and after they have been modified.
- Exempted user agents
- Added site collection admin
- Added members to groups
- Allowed users to create groups
- Modified exempt user agents
- Modified sharing policy
- Created groups
- Created send-to connections
- Created site collections
- Deleted groups
- Deleted send-to collections
- Preview mode enabled documents
- Enabled workflow
- Enabled Office on Demand
- Enabled RSS feeds
- Modified people search result scope
- Modified site permissions
- Removed group members
- Renamed sites
- Requests made to be a site admin
- Sites modified to host sites
- Updated groups
- Added allowed data location
- Deleted allowed data location
- Added geo location admin
- Removed geo location admin
- Cancelled site geo move
- Changed device access policy
- Changed network access policy
- Completed site geo move
- Deleted orphaned hub site
- Joined site to hub site
- Registered hub site
- Scheduled site geo move
- Set storage quota for geo location
- Unjoined site from hub site
- Unregistered hub site
- Modified access request setting
- Modified 'Members Can Share' setting
- Removed site collection admin
- Broke permission level inheritance
- Broke sharing inheritance
- Modified permission level on site collection
- Restored sharing inheritance
- Deleted site
- Removed permission level from site collection
- Modified site collection quota
SharePoint sync activity reports
Keep an eye on sync activities to ensure your computers and files are synced properly and avoid data loss.
- Allowed computer to sync files
- Blocked computer from syncing files
- Downloaded files to computer
- Downloaded file changes to computer
- Uploaded files to document library
- Uploaded file changes to document library
Sensitivity label activity reports
By tracking sensitivity label modifications, you can ensure only the required sites and files are restricted and prevent unauthorized access.
- Applied sensitivity label to site
- Removed sensitivity label from site
- Applied sensitivity label to file
- Changed sensitivity label applied to file
- Removed sensitivity label from file