Skip to content

Commit 4b3b927

Browse files
authored
Merge pull request MicrosoftDocs#4851 from MicrosoftDocs/chrisda
Update Search-MailboxAuditLog.md
2 parents ef0d8f8 + 6e22d1c commit 4b3b927

File tree

1 file changed

+21
-5
lines changed

1 file changed

+21
-5
lines changed

exchange/exchange-ps/exchange/policy-and-compliance-audit/Search-MailboxAuditLog.md

Lines changed: 21 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -278,24 +278,38 @@ Accept wildcard characters: False
278278
```
279279
280280
### -Operations
281-
The Operations parameter filters the search results by the operations that are logged by mailbox audit logging. Valid values are:
281+
The Operations parameter filters the search results by the mailbox actions that are logged by mailbox audit logging. Valid values are:
282+
283+
- AddFolderPermissions (Exchange 2019 and Exchange Online only. Although this value is accepted, it's already included in the UpdateFolderPermissions action and isn't audited separately.)
284+
285+
- ApplyRecord (Exchange Online only)
282286
283287
- Copy
284288
285289
- Create
286290
291+
- Default (Exchange Online only)
292+
287293
- FolderBind
288294
289295
- HardDelete
290296
291297
- MailboxLogin
292298
293-
- MessageBind
299+
- MailItemsAccessed (Exchange Online only and only for E5 or E5 Compliance add-on subscription users.)
300+
301+
- MessageBind (Although this value is accepted, these actions are no longer logged.)
302+
303+
- ModifyFolderPermissions (Exchange 2019 and Exchange Online only. Although this value is accepted, it's already included in the UpdateFolderPermissions action and isn't audited separately.)
294304
295305
- Move
296306
297307
- MoveToDeletedItems
298308
309+
- RecordDelete (Exchange Online only)
310+
311+
- RemoveFolderPermissions (Exchange 2019 and Exchange Online only. Although this value is accepted, it's already included in the UpdateFolderPermissions action and isn't audited separately.)
312+
299313
- SendAs
300314
301315
- SendOnBehalf
@@ -304,11 +318,13 @@ The Operations parameter filters the search results by the operations that are l
304318
305319
- Update
306320
307-
- UpdateCalendarDelegation (cloud-based service only)
321+
- UpdateCalendarDelegation (Exchange 2019 and Exchange Online only)
322+
323+
- UpdateComplianceTag (Exchange Online only)
308324
309-
- UpdateFolderPermissions (cloud-based service only)
325+
- UpdateFolderPermissions (Exchange 2019 and Exchange Online only)
310326
311-
- UpdateInboxRules (cloud-based service only)
327+
- UpdateInboxRules (Exchange 2019 and Exchange Online only)
312328
313329
You can enter multiple values separated by commas.
314330

0 commit comments

Comments
 (0)