For more on Data Loss Prevention (DLP) see Overview of Data Loss Prevention Policies Activity API operationsĪll API operations are scoped to a single tenant and the root URL of the API includes a tenant ID that specifies the tenant context. If you are retrieving content blobs for multiple tenants, you create multiple subscriptions to each of the desired content types, one for each tenant.Īfter you create a subscription, you can poll regularly to discover new content blobs that are available for download, or you can register a webhook endpoint with the subscription and we will send notifications to this endpoint as new content blobs are available.ĭLP sensitive data is only available in the activity feed API to users that have been granted “Read DLP sensitive data” permissions. To begin retrieving content blobs for a tenant, you first create a subscription to the desired content types. Currently, these content types are supported:Īudit.General (includes all other workloads not included in the previous content types)ĭLP.All (DLP events only for all workloads)įor details about the events and properties associated with these content types, see Office 365 Management Activity API schema.
The Office 365 Management Activity API aggregates actions and events into tenant-specific content blobs, which are classified by the type and source of the content they contain.
Working with the Office 365 Management Activity API For instructions, see Turn Office 365 audit log search on or off. You do this by turning on the Office 365 audit log. Before you can access data through the Office 365 Management Activity API, you must enable unified audit logging for your Office 365 organization.
0 kommentar(er)
