Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,7 @@ This article provides details on the Common schema as well as service-specific s
|[Restore Task schema](#restore-task-schema)|Extends the Common schema with the properties specific to Microsoft 365 Backup Restore Tasks.|
|[Backup Item schema](#backup-item-schema)|Extends the Common schema with the properties specific to Microsoft 365 Backup artifacts.|
|[Restore Item schema](#restore-item-schema)|Extends the common schema with the properties specific to Microsoft 365 Backup Restore Items.|
|[Granular Browse Task schema](#granular-browse-task-schema)|Extends the Common schema with the properties specific to Microsoft 365 Backup Granular Browse Tasks.|
|[Cloud Policy service schema](#cloud-policy-service-schema)|Extends the Common schema with the properties specific to all Cloud Policy service audit data.|
|[Cloud Update profile configuration schema](#cloud-update-profile-configuration-schema)|Extends the Common schema with the properties specific to the Cloud Update profile configuration audit data.|
|[Cloud Update tenant configuration schema](#cloud-update-tenant-configuration-schema)|Extends the Common schema with the properties specific to the Cloud Update tenant configuration audit data.|
Expand Down Expand Up @@ -376,6 +377,7 @@ This article provides details on the Common schema as well as service-specific s
|422|VivaEngageEvents|Events related to Viva Engage hosted events.|
|427|UniversalPrintManagement| Audit events related to Management events in Microsoft Universal Print.|
|430|PurviewPostureAgent|Data Security Posture Agent events.|
|431|GranularBrowseTask|Events related to browsing backed up site's restore point using Microsoft 365 Backup.|

### Enum: User Type - Type: Edm.Int32

Expand Down Expand Up @@ -819,6 +821,9 @@ SharePoint events (excluding the file and folder events) returned in [audit log
|TokenTenantId|Edm.String|No|tid claim of the Microsoft Entra tokens.|
|AuthType|Edm.String|No|Specifies the authentication scheme used by the client to access the service.|
|TokenType|Edm.String|No|Indicates the type of token presented during authentication, providing context on the token’s role and scope.|
|recipientCount|Edm.Int64|No|Represents the total number of recipients, to whom email was sent.|
|recipientList|Collection(Self.[EmailAddress](#emailaddress-complex-type))|No|Captures the list of mailbox recipients, maximum 1000.|


### Enum: LogonType - Type: Edm.Int32

Expand Down Expand Up @@ -1973,6 +1978,18 @@ Entity events from model-driven apps in Dynamics 365 use this schema to build on
|Query|Edm.String|No|The parameters of the filter query that was used while executing the FetchXML operation.|
|PrimaryFieldValue|Edm.String|No|Indicates the value for the attribute that is the primary field for the entity.|

## eSignature schema

This schema includes [eSignature for Microsoft 365](/microsoft-365/documentprocessing/esignature-overview?view=o365-worldwide) events returned in audit log searches.

|Parameters|Type|Mandatory?|Description|
|---|---|---|---|
|AgreementId|Edm.Guid|Yes|ID of the electronic signature request.|
|AgreementSender|Edm.String|Yes|Sender of the electronic signature request.|
|AgreementCreationDateTime|Edm.Date|Yes|Date & time request was sent.|
|AgreementStatus|Self.AgreementStatusType|Yes|Status of the request.|
|AgreementRecipients|Collection(Self.AgreementRecipient)|Yes|Recipients of the request.|

## Viva Insights schema

[Viva Insights events](/purview/audit-log-activities#microsoft-viva-insights-activities) returned in [audit log searches](/purview/audit-search) use this schema.
Expand Down Expand Up @@ -2728,6 +2745,17 @@ Values taken by SettingsChange properties in Details for different operations ar
|CountOfArtifactsBeingAdded|Edm.Int32|No|Number of artifacts being added.|
|CountOfArtifactsBeingRemoved|Edm.Int32|No|Number of artifacts being removed.|
|ServiceType|Edm.String|No|Whether it is a SharePoint, Exchange, or OneDriveForBusiness policy.|
|BillingPolicyId|Edm.String|No|The ID of the associated Billing Policy.|

## Granular Browse Task schema

|Parameters|Type|Mandatory?|Description|
|---|---|---|---|
|SessionId|Edm.String|Yes|The ID of the Browse Task.|
|RestoreTime|Edm.Date|No|Restore Point dateTime on which browse session was created.|
|BackupItemId |Edm.String|No|Artifact Id for which browse session was created.|
|ServiceType|Edm.String|Yes|Whether it is a SharePoint, Exchange, or OneDriveForBusiness policy.|


## Restore Task schema

Expand Down
Loading