M365 Changelog: Audit – Manage Audit permissions from Purview Compliance Portal

MC679529 – To search or export the audit log, administrators or members of investigation teams must be assigned to at least one of the View-Only Audit Logs or Audit Logs roles. Previously, these roles had to be assigned using the Exchange Admin Center. With this feature, administrators can now assign audit-related role groups directly from the Microsoft Purview Compliance portal.

This message is associated with Microsoft 365 Roadmap ID 177888

When this will happen:

This feature is now available.

How this will affect your organization:

Admins in your organization will now be able to assign audit-related role groups directly from the Microsoft Purview Compliance portal. To search or export the audit log, an administrator must be assigned at least one of the following audit-related role groups in the compliance portal: Audit Manager, or Audit Reader.

What you need to do to prepare:

To view the Permissions tab in the compliance portal, users need to be a global administrator or need to be assigned the Role Management role. To search or export the audit log, an administrator must be assigned at least one of the following audit-related role groups in the Permissions tab of compliance portal: Audit Manager, or Audit Reader.

Learn more about audit-related role groups here: Set up Audit (Standard) in Microsoft 365 | Microsoft Learn

Any existing audit-related permissions (View-Only Audit Logs, or Audit Logs) assigned using the Exchange Admin Center will remain unaffected with this release. An administrator can be assigned audit-related permissions through either the Exchange Admin Center or the compliance portal.

Microsoft Purview Audit enables customers to centrally visualize cloud log data generated across their enterprise, thus helping them effectively respond to security events, forensic investigations, internal investigations and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded and retained in customers unified Microsoft Purview Audit logs.

Learn more: Learn about Microsoft Purview Audit

Compliance Portal

Exchange Admin Center

Additional information