Overview
You need to configure your Microsoft environment before you can authorize the Incydr data connection to it. To configure your Microsoft environment, verify that audit is turned on in preparation for the Incydr data connection. This article helps you verify that audit is on or turn it on if needed.
Considerations
Incydr requires a Microsoft license or subscription that includes Audit (Standard) in order to monitor file activity in your OneDrive and SharePoint environments.
Incydr monitoring requires that audit is turned on
Audit must be turned on in your Microsoft environment in order for Incydr to be able to monitor file activity in OneDrive and SharePoint. If auditing is off, Incydr cannot collect data and no file events are displayed in Forensic Search. If you have one of the Microsoft business licenses, you may need to turn on auditing in your environment before connecting with Incydr. Unless it has previously been turned off, customers with a Microsoft enterprise license may already have auditing turned on by default.
Verify audit is turned on
- Sign in to the Microsoft Purview compliance portal using your Microsoft global administrator username and password.
- Select Solutions > Audit.
If auditing is turned off in your environment, the banner at the top of the Search tab prompts you to start recording user and admin activity. This banner does not appear if auditing is already on. - If prompted, click the banner at the top of the Search tab to turn on audit.
The banner updates to indicate that auditing is enabled and you can search for user and admin activity within 24 hours.
External resources
Microsoft documentation:
- Turn auditing on or off
- Reimagine productivity with Microsoft 365 and Microsoft Teams
- Powerful tools to support your enterprise
Comments
Please sign in to leave a comment.