SharePoint Online provides a rich collaboration environment where users from your organization and external users can work together. Microsoft 365 supports the unified audit log system to track the user activities performed in different Microsoft 365 services. In this blog, we will explore how to search the audit logs of all users’ access for files/folders on SharePoint Online/Microsoft Teams Site.
Administrators can now search the audit log from the Compliance portal admin center (aka Microsoft Purview compliance portal). This portal helps us to search activity logs in a specific SPO site, for all users or given user, for all actions or specific activities such as Uploaded file, Downloaded file, Renamed file, Modified file, Copied file, Moved file, Deleted file, Accessed file, Checked-in file, Checked-out file, and etc.
Search All Users File access activity logs and export the report to CSV
Follow the below steps to generate the file access audit report for all users on a SharePoint Online site.
- Go to Microsoft 365 admin center -> Admin centers (In left-side navigation) -> select Compliance to open the Microsoft 365 compliance portal.
- On the Compliance portal page, on the left-hand side, under Solutions, click Audit.
- Set Start and End date range, set file access Activities to search, I have selected Accessed file, Uploaded file, Downloaded file, Modified file, and Deleted file. You can select required activities as per your requirement.
- Leave the Users field blank to search all users’ logs and enter the full URL of the SPO Site collection under File, folder, or site (ex: https://contoso.sharepoint.com/sites/sitename).
- Finally, click the Search button to generate the report.
- Now, you can easily export the report by clicking the Export button -> Download all results.