Microsoft 365 Admin Center: Admin Audit logs in Purview
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
- Roadmap
- 498227
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
What the notice says
Microsoft’s text, safely structuredUpdated October 28, 2025: We have updated the content. Thank you for your patience.
Introduction
Admin activity related to agent management will now be logged in Microsoft Purview Unified Audit Logs. This enhancement improves visibility and traceability for security teams managing Copilot agents across Microsoft 365 services.
This message is associated with Microsoft 365 Roadmap ID 498227.
When this will happen
General Availability (Worldwide): Rollout will begin in late October 2025 and is expected to complete by mid-November 2025.
| Category | Actions | Record Types | Release Timeline |
|---|---|---|---|
| Agent Management | Block, Unblock, Deploy, Update, Remove | AgentAdminActivity | October |
| Category | Actions | Record Types | Release Timeline |
|---|---|---|---|
| Agent Management | Publish, Reject, Delete | AgentAdminActivity | November |
| Agent Tenant Settings | Tenant agent setting, 1P, 3P and LOB Toggle | AgentSettingsAdminActivity | November |
How this affects your organization
Who is affected:Admins managing Microsoft Copilot agents in Microsoft 365 environments.
What will happen:
- Admin actions such as publishing, deploying, removing, and updating agents will be logged.
- Changes to agent settings at both tenant and agent levels will be captured.
- Audit schema includes key data points such as agent name, agent type, and admin ID.
- Logs will be accessible via the Purview Portal.
- Feature is enabled by default; no configuration required.
Screenshot 1 - Search view in the new Microsoft Purview Unified Audit Log:
Screenshot 2 - Details view in the new Microsoft Purview Unified Audit Log:
What you can do to prepare
- Security teams can begin searching and reviewing agent-related admin actions in the Purview Portal.
- Familiarize yourself with audit log search capabilities in Purview.
- No additional configuration is required to enable logging.
Compliance considerations
| Question | Answer |
|---|---|
| Does the change alter how existing customer data is processed, stored, or accessed (e.g. documents, emails, chats, etc.), if so how and to what extent? | Yes – Admin actions related to agent management are now logged, increasing visibility into operational activities. |
| Does the change modify, interrupt, or disable any of the following capabilities (Purview): Audit logging capabilities? | Yes – Adds new audit events specific to agent management in Purview Unified Audit Logs. |
| Does the change alter how admins can monitor, report on, or demonstrate compliance activities e.g. Purview or admin reporting, if so summarize the changes? | Yes – Admins gain new visibility into agent-related actions, improving compliance reporting and audit traceability. |
| Does the change include an admin control and, can it be controlled through Entra ID group membership? | Yes – Logging is automatic, but access to audit data is controlled via Purview permissions, which can be scoped using Entra ID groups. |
What changed
Between archive captures, newest firstUpdated October 28, 2025: We have updated the content. Thank you for your patience. Introduction Admin activity related to agent management will now be logged in … in late October 2025 and is expected to complete by mid-November 2025. Category Actions Record Types Release Timeline Agent Management Block, Unblock, Deploy, Update, Remove AgentAdminActivity October Category Actions Record Types Release Timeline Agent Management Publish, Reject, Delete AgentAdminActivity November Agent Tenant Settings Tenant agent setting, 1P, 3P and LOB Toggle AgentSettingsAdminActivity November How this affects your organization: Who is affected:Admins managing Microsoft Copilot agents …
- · first version seen
Learn more
Links from the notice and their documentation checksRelated public evidence
No related evidence found in this installation's recent collection. This does not establish that no announcement exists.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.