How to Audit OneDrive Files and Folder Access

This OneDrive for Business post will show you how to audit OneDrive files and Folder Access.

The Microsoft OneDrive cloud storage service is a good alternative to Dropbox and Google Drive. It allows users to store files and folders online, share them with others, and access them from anywhere.

OneDrive is an excellent tool for storing and sharing files, but it’s important to keep track of who has access to your files and folders. In this guide, we will show you how to audit the OneDrive file and folder access.

When it comes to OneDrive file and folder access, there are two main types of permissions: public and private.

Public permissions allow anyone with the link to access the file or folder. Private permissions restrict access to only those who the owner has invited.

To Audit users’ and administrators’ activities across OneDrive (File and Folders), we use the Microsoft 365 Unified Audit Log available from the Microsoft 365 Defender portal.

All logs are retained for 90 days by default if you are on the E3 subscription level. They are kept for one year if you are on an E5 subscription.

How to Audit OneDrive Files and Folder Access

To audit OneDrive file and folder access, open the Microsoft 365 Defender portal.

On the search page, fill in the following: Date, specific users, and the file’s name.

How to Audit OneDrive Files and Folder Access

On the result page, you will see what someone accessed a file. The result shows the username, activity, IP and details of the event.

Conclusion

Enabling auditing in OneDrive for Business is a straightforward process that can benefit any organization.