Topic hub
Compliance & Audit
What auditors ask for, why current permission exports fall short, and how to produce defensible historical evidence.
Guides in Compliance & Audit
Start with How to Investigate Who Changed SharePoint Permissions.
- Compliance & Audit10 min read, intermediate
How to Investigate Who Changed SharePoint Permissions
A step-by-step method for attributing a SharePoint Online permission change to an actor and a timestamp, reading the audit record, and reconstructing the before and after state.