On February 16, 2023, administrator activity events delivered to Microsoft Purview was released to general availability (GA). This release enables new Power Platform activity events to be delivered to Microsoft 365 Unified Services via a Data Connector through the Microsoft 365 Management API, making them available to Microsoft Purview, Microsoft Defender, and Microsoft Sentinel. These new activity events capture Environment Lifecycle Operations and Property Settings actions performed by administrators of Power Platform across the customer management plane of your environment.
Please note, administrative activities for Power Platform environments are enabled by default, and activity collection cannot be disabled; however, you will not be charged for the collection of these activities.
How does this affect me?
We have provided the availability of Administrator Activity events with Microsoft Purview, Microsoft Defender, and Microsoft Sentinel via a Data Connector to the Microsoft 365 Management API to support regularity requirements and forensic investigations, support enterprise compliance, and support threat detection and mitigation before threats disrupt business.
Users who are assigned an Audit Premium license can view activity events in Microsoft Purview. Visit Auditing solutions in Microsoft Purview to learn more about licensing requirements.
What do I need to do to prepare?
This message is for awareness and no action is required.
Review the product documentation regarding how to view Power Platform administrative logs using auditing solutions in Microsoft Purview for more information.
