Microsoft Azure portal for Intune provide you the information about user sign-in activities (includes usage of managed applications) and Audit Logs (information about users ,group management ,your managed applications and directory activities) through reporting.
The information which is tracked ,will help you to determine sign-in status for applications,with MFA(Multi factor authentication),MFA results etc
To see the activity of Sign-ins and Audit logs, login to https://portal.azure.com ,click on Intune ,right side you will see Users
Click on Users to see activity with Sign-ins and Audit logs ,Click on Sign-Ins
On the right side ,you will see list of all users with their sign-in status for applications.
On the top, you will see several filters like Date (Range from 1 month,7 days,24 hours and custom) ,User (user name or UPN name),Application (application name),client and Sign-in status (success,failure or all).
I want to see the activities performed by specific users (eswar) ,to see that, simply type the user name or UPN in User filter tab and click on Apply to see the results
You also have an option to download the results into CSV format.
To see the audit logs ,while you are on users and groups- sign-ins ,click on Audit logs to see information about users ,group management.
Audit logs also filter option to list the activities performed by specific user instead of seeing long results.
As you can see from above snippet,there are several activities for user eswar koneti like change user license ,add owner to group,member to group,update user initiated by (actor) .
This also gives you option to download the results into CSV file.
I will need to see if this information can get from Power BI without going through Azure portal. Power BI for Microsoft Intune ,please refer http://eskonr.com/2017/09/power-bi-for-microsoft-intune/ .
FAQs
Sign in to the Microsoft Intune admin center. Select Tenant administration > Audit logs. To filter the results, select Filter and refine the results using the following options. Category: such as Compliance, Device, and Role.
How do I check my audit logs in Intune? ›
Sign in to the Microsoft Intune admin center. Select Tenant administration > Audit logs. To filter the results, select Filter and refine the results using the following options. Category: such as Compliance, Device, and Role.
How do I check my login activity on Azure? ›
To view activity log insights at the resource level:
- In the Azure portal, go to your resource and select Workbooks.
- In the Activity Logs Insights section, select Activity Logs Insights.
- At the top of the Activity Logs Insights page, select a time range for which to view data from the TimeRange dropdown:
Sign in to the Microsoft Intune admin center. Select Reports > Device compliance > Reports tab, and select the Policy compliance tile. Use the drop-down to select which platforms the report will include. Select Generate report (or Generate again) to generate the report using updated data.
Does Intune track user activity? ›
They provide a record of actions taken by users and administrators, offering insights into who did what and when. Operational Logs: These logs provide information about the success or failure of users and devices that enroll in Intune.
How do I access my Azure audit logs? ›
To enable audit logs in diagnostic logging, select your Azure Data Manager for Energy instance in the Azure portal. Currently, you can enable audit logs for OSDU Core Services, Seismic DMS, Petrel Data Services, and Wellbore DMS. Select the Activity log screen, and then select Diagnostic settings.
Where are Azure audit logs? ›
View audit logs in the Azure portal
The Azure portal provides access to the audit log events in your Azure AD B2C tenant. Sign in to the Azure portal.
How do I check my login activity? ›
Go to your Google Account. On the left navigation panel, select Security . On the Your devices panel, select Manage all devices. You'll see devices where you're currently signed in to your Google Account or have been in the last few weeks.
How do I check my Azure log Analytics? ›
To access Azure Log Analytics, you need to sign in to the Azure portal with your Azure account. Once you're signed in, you can access Log Analytics by selecting it from the list of services in the portal. To use Log Analytics, you need to create a Log Analytics workspace in your Azure subscription.
How do I check my login activity event viewer? ›
To view the events, open Event Viewer and navigate to Windows Logs > Security. Here you'll find details of all events that you've enabled auditing for. You can define the size of the security log here, as well as choose to overwrite older events so that recent events are recorded when the log is full.
Intune contains a single important location that stores all the different available log files for that agent -- C:\ProgramData\Microsoft\IntuneManagementExtension\Logs.
How do I pull data from Intune? ›
Grant the client app access to the Microsoft Intune API
- Sign in to the Microsoft Entra admin center.
- Choose Microsoft Entra ID > App Registrations to open the App registrations pane.
- Select the app that you need to grant access. ...
- Select API permissions > Add a permission.
- Find and select the Intune API.
Your organization can't see your personal information when you enroll a device in Microsoft Intune. Enrolling your device makes certain information, such as device model and serial number, visible to IT administrators and support people with administrator access.
Can Intune track browser history? ›
Intune doesn't collect nor allow an Admin to see the following data: An end users' calling or web browsing history.
What is Intune tracking? ›
With Intune, administrators can see a variety of information on managed devices, including hardware and software inventory, device compliance status, and app usage. They can also remotely wipe devices, set security policies, and install or remove apps.
How do I check my Audit log in d365? ›
Log in to Microsoft Dynamics CRM with a user with permission to manage auditing. Navigate to Settings > Auditing > Audit Summary View. Click Enable/Disable Filters to allow the ability to filter logs. Note: It is also possible to view audit logs from a record.
How do I view security audit logs? ›
The security log records each event as defined by the audit policies you set on each object. Open Event Viewer. In the console tree, expand Windows Logs, and then click Security. The results pane lists individual security events.
How do I access my 365 Audit log? ›
Go to the Microsoft 365 Security & Compliance Center. Go to Search and then Audit log search. Click Turn on auditing by clicking the Start recording user and admin activity banner.
How do I view server audit logs? ›
Using SQL Server Management Studio
- In Object Explorer, expand the Security folder.
- Expand the Audits folder.
- Right-click the audit log that you want to view and select View Audit Logs. This opens the Log File Viewer -server_name dialog box. For more information, see Log File Viewer F1 Help.
- When finished, click Close.
