check before: 2024-10-28
Product:
Purview Communication Compliance, SharePoint
Platform:
Online, US Instances, World tenant
Status:
Change type:
Feature update, User impact
Links:
Details:
Summary:
Enable audit log search for SharePoint Online content searches in Microsoft Purview by following the provided instructions. This feature is now generally available and requires enabling 'SearchQueryInitiatedSharePoint' for users. No admin action is needed before the rollout, but reviewing configurations and updating documentation is advised.
Details:
By default, searches conducted from various Microsoft 365 entry points into Microsoft SharePoint Online are not collected in the Microsoft Purview audit log search. You may enable these searches to be collected by following these instructions: Step 4: Enable SearchQueryInitiated events in Get started with auditing solutions | Microsoft Learn.
[When this will happen:]
General Availability (Worldwide, GCC, GCC High, DoD): Available now.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2024-10-29
updated:
2024-10-29
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft has introduced a feature in Microsoft Purview that enables audit log searches for SharePoint Online content searches, requiring the activation of the 'SearchQueryInitiatedSharePoint' setting for each user to capture all search activities.
Direct effects for Operations**
Audit Log Search Activation
If the audit log search for SharePoint Online is enabled without prior user notification, users may be confused about the sudden availability of search logs, leading to potential misuse or misinterpretation of the data.
- roles: End Users, Compliance Officers
- references: https://learn.microsoft.com/purview/audit-get-started
User Experience Disruption
The automatic enabling of SearchQueryInitiatedSharePoint may lead to unexpected changes in user experience, as users may not be aware that their search activities are being logged, potentially affecting their trust in the platform.
- roles: End Users, IT Support Staff
- references: https://learn.microsoft.com/purview/audit-get-started#step-4-enable-searchqueryinitiated-events
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 weeks ago
