SharePoint Online Audit Log Tool

Easy-to-use SharePoint audit tool safeguards user access, helps demonstrate compliance, and supports incident response

Compliance reporting designed for speed and simplicity

Compliance reporting designed for speed and simplicity

Even in small organizations, SharePoint permissions management can quickly become complex. This level of complexity can slow down SharePoint security audits. SolarWinds® Access Right Manager (ARM) is built to simplify compliance by helping you provide auditors validation you’re adhering to security policy by safely delegating access privilege. Unlike other SharePoint audit tools, ARM is built to simultaneously help reduce IT workload and risks. Plus, ARM fully automates report scheduling and delivery—directly to your auditor and other key stakeholders.

Help safeguard user access to SharePoint files

Help safeguard user access to SharePoint files

Although Microsoft SharePoint can house some of an organization’s most valuable resources, analyzing SharePoint audit logs can be slow and difficult. Our simple-to-use SharePoint audit tool, SolarWinds Access Rights Manager (ARM), is designed to help simplify your audit program by reporting who has access to what SharePoint data—and provides a full audit trail of when they accessed it. With rich SharePoint reporting, ARM can help make the next risk assessment easier and faster. If ARM discovers an account with insecure configurations, the tool will instantly alert you to automatically deprovision the user’s account.

Respond to SharePoint data risks

Respond to SharePoint data risks

Monitoring user access to SharePoint files and folders is essential for security and compliance. Yet responding to these risks at scale requires deep analytics as well as efficient automation. SolarWinds Access Rights Manager, a lightweight SharePoint audit tool, can analyze Active Directory management of user permissions and automate user provisioning and deprovisioning for rapid responses to data breach risks. Whether you detect suspicious user activity in Microsoft Exchange or in SharePoint, ARM can capture the full audit trail to help support audits and investigations.
Get More on SharePoint Online Audit Tools
Do you find yourself asking…
  • What are SharePoint audit logs?
  • Why are SharePoint security audits important?
  • How does a SharePoint permissions audit tool work?
  • How does the SharePoint permissions audit tool in SolarWinds Access Rights Manager work?
  • Related Features and Tools
  • What are SharePoint audit logs?

    SharePoint audit logs are records of events, operations, and changes over time in SharePoint, which is a widely used content management and collaboration tool. SharePoint online audit logs can tell you who accessed which elements of SharePoint, when they accessed those elements, and what actions they performed during their time in the platform. This can include operations such as:

    • Opened, viewed, or downloaded documents and items
    • Items moved and copied to another location in the site collection
    • Edits and modifications made to accounts, permissions, and audit settings
    • Deleted or restored items and audit log events
    • Checked out and in items
    • Audit log search queries

    By sorting, filtering, and analyzing the data present in a SharePoint online audit log, you can understand relevant and important events.

    SharePoint also enables you to create native audit log reports. However, there are limitations to these reports—for instance, they can only list users assigned permissions to site collection and won’t list user effective permissions. Built-in audit log reports also don’t offer easy-to-read details on critical permission changes. This can make it very difficult and time-consuming to determine whether a specific user’s permissions are appropriate.

  • Why are SharePoint security audits important?

    SharePoint security audits are important for maintaining regulatory compliance and organizational security. Because the application enables you to share sensitive information for the sake of internal and external collaboration, it’s important to secure and define user access levels. Without a proper system in place for managing user access control, your enterprise’s proprietary information could easily be endangered.

    Anything from siloed team members to complex and inefficient operations could result in data loss, theft, and mismanagement. By knowing who has access to sensitive files, you can better prevent data leakage and other security risks. It’s also important to know who has access to backups, specific machines, and report exporting capabilities. A SharePoint security audit can help you determine these audit settings and optimize them for improved security.

    It’s critical to clearly define SharePoint user and admin roles as well as access controls. But this list can get messy very quickly—especially for bigger enterprises with many large systems, file stores, and data repositories. This is why it’s important to take a holistic and proactive approach when auditing SharePoint for security and compliance, and perform these audits regularly.

  • How does a SharePoint permissions audit tool work?

    A SharePoint permissions audit tool works by giving you deep insights into SharePoint operations and modifications, as well as who conducted those tasks and when, via audit logs and trails. This enables you to discover suspicious activity, such as unauthorized access and credential abuse, so you can quickly investigate and respond to cybersecurity risks.

    Many SharePoint permissions audit tools are made to monitor access and specify how often an attempt to connect is made, along with how long the connection takes. A SharePoint online audit tool could also help you determine the maximum number of scan attempts before cancelation, plus support other processes for ending access when it’s no longer needed. This enables you to further protect the important data in SharePoint files and folders.

    Many SharePoint audit tools enable you to simplify compliance with automated reporting capabilities. These reports can help you understand and evaluate how a user’s access rights could impact security or compliance. You can also exclude various items—including administrators, owners, and secondary contacts, as well as list access and hidden lists—from a report, view, or scan as needed.

  • How does the SharePoint permissions audit tool in SolarWinds Access Rights Manager work?

    The SharePoint permissions audit tool in SolarWinds Access Rights Manager (ARM) works by communicating with SharePoint via Microsoft components, which are tailored to the specific SharePoint system in use. Through this design, ARM enables you to retrieve SharePoint online audit logs and perform proper analysis on them. In turn, ARM helps enable you to understand critical events in SharePoint and assess their risk.

    ARM is built to let you easily generate audit reports for analyzing user and admin activities. You could view critical audit settings and user activity with ARM reports, including who invited external users to access internal resources and which of those external users accessed them. Through these reports, ARM enables you to easily find out who shares which data and who accesses it regularly.

    You could also run a SharePoint scan on ARM. To do this, you’ll need to configure two types of accounts:

    • A process account, which enables you to execute the scan process on a selected collector. Your process account needs to have local administrative rights as well as interactive logon privileges to work.
    • A scan account, which is used for the actual scan itself.

    To add a SharePoint on-premises resource, the account must be the same as the owner account registered for site collection. To add a SharePoint online resource, the scan account requires site admin permissions. Through letting you access SharePoint online and on-premises, ARM is designed to be a complete and comprehensive SharePoint audit tool.

  • Related Features and Tools

    Other SolarWinds Tools to Help With SharePoint Management:


    Related Features:

What are SharePoint audit logs?

SharePoint audit logs are records of events, operations, and changes over time in SharePoint, which is a widely used content management and collaboration tool. SharePoint online audit logs can tell you who accessed which elements of SharePoint, when they accessed those elements, and what actions they performed during their time in the platform. This can include operations such as:

  • Opened, viewed, or downloaded documents and items
  • Items moved and copied to another location in the site collection
  • Edits and modifications made to accounts, permissions, and audit settings
  • Deleted or restored items and audit log events
  • Checked out and in items
  • Audit log search queries

By sorting, filtering, and analyzing the data present in a SharePoint online audit log, you can understand relevant and important events.

SharePoint also enables you to create native audit log reports. However, there are limitations to these reports—for instance, they can only list users assigned permissions to site collection and won’t list user effective permissions. Built-in audit log reports also don’t offer easy-to-read details on critical permission changes. This can make it very difficult and time-consuming to determine whether a specific user’s permissions are appropriate.

Close
Why are SharePoint security audits important?

SharePoint security audits are important for maintaining regulatory compliance and organizational security. Because the application enables you to share sensitive information for the sake of internal and external collaboration, it’s important to secure and define user access levels. Without a proper system in place for managing user access control, your enterprise’s proprietary information could easily be endangered.

Anything from siloed team members to complex and inefficient operations could result in data loss, theft, and mismanagement. By knowing who has access to sensitive files, you can better prevent data leakage and other security risks. It’s also important to know who has access to backups, specific machines, and report exporting capabilities. A SharePoint security audit can help you determine these audit settings and optimize them for improved security.

It’s critical to clearly define SharePoint user and admin roles as well as access controls. But this list can get messy very quickly—especially for bigger enterprises with many large systems, file stores, and data repositories. This is why it’s important to take a holistic and proactive approach when auditing SharePoint for security and compliance, and perform these audits regularly.

Close
How does a SharePoint permissions audit tool work?

A SharePoint permissions audit tool works by giving you deep insights into SharePoint operations and modifications, as well as who conducted those tasks and when, via audit logs and trails. This enables you to discover suspicious activity, such as unauthorized access and credential abuse, so you can quickly investigate and respond to cybersecurity risks.

Many SharePoint permissions audit tools are made to monitor access and specify how often an attempt to connect is made, along with how long the connection takes. A SharePoint online audit tool could also help you determine the maximum number of scan attempts before cancelation, plus support other processes for ending access when it’s no longer needed. This enables you to further protect the important data in SharePoint files and folders.

Many SharePoint audit tools enable you to simplify compliance with automated reporting capabilities. These reports can help you understand and evaluate how a user’s access rights could impact security or compliance. You can also exclude various items—including administrators, owners, and secondary contacts, as well as list access and hidden lists—from a report, view, or scan as needed.

Close
How does the SharePoint permissions audit tool in SolarWinds Access Rights Manager work?

The SharePoint permissions audit tool in SolarWinds Access Rights Manager (ARM) works by communicating with SharePoint via Microsoft components, which are tailored to the specific SharePoint system in use. Through this design, ARM enables you to retrieve SharePoint online audit logs and perform proper analysis on them. In turn, ARM helps enable you to understand critical events in SharePoint and assess their risk.

ARM is built to let you easily generate audit reports for analyzing user and admin activities. You could view critical audit settings and user activity with ARM reports, including who invited external users to access internal resources and which of those external users accessed them. Through these reports, ARM enables you to easily find out who shares which data and who accesses it regularly.

You could also run a SharePoint scan on ARM. To do this, you’ll need to configure two types of accounts:

  • A process account, which enables you to execute the scan process on a selected collector. Your process account needs to have local administrative rights as well as interactive logon privileges to work.
  • A scan account, which is used for the actual scan itself.

To add a SharePoint on-premises resource, the account must be the same as the owner account registered for site collection. To add a SharePoint online resource, the scan account requires site admin permissions. Through letting you access SharePoint online and on-premises, ARM is designed to be a complete and comprehensive SharePoint audit tool.

Close
Related Features and Tools

Powerful, Easy-to-Use SharePoint Online Audit Tool

Access Rights Manager

  • Monitor and audit Active Directory, Exchange, SharePoint, and file server permissions

  • Quickly manage and provision user access

  • Generate custom management and audit reports

Starts at {#Product Price#} Subscription and Perpetual Licensing options available
Let’s talk it over.
Contact our team. Anytime.
{#Contact Phone#}
{{STATIC CONTENT}}
{{CAPTION_TITLE}}

{{CAPTION_CONTENT}}

{{TITLE}}