Remove_member_from_role_Office 365_Core Directory

Event

Remove member from role (Remove member from role)

SK4 unified event:
Connector/Service

Office 365/Core Directory

SK4 Version:

2.3.85

Created Date:

Tue Dec 11 2018 11:07:24 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:13:56 GMT+0000 (Coordinated Universal Time)

Category

Privilege Management

Description

The user has been removed from the authorization group's role.

Search query

cef_vendor="skyformation" cef_name="authz-group-unassigned" destinationServiceName="Office 365" sourceServiceName="Core Directory" fileType="role"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources