The following table lists user administration activities that are logged when an admin adds or changes a user account by using the Office 365 admin center or the Azure management portal.


Activity
Operation
Description
Added user
Add user
An Office 365 user account was created.
Changed user license
Change user license
The license assigned to a user what changed. To see what licenses were changes, see the corresponding Updated user activity.
Changed user password
Change user password
Administrator changed the password the password for a user.
Deleted user
Delete user
An Office 365 user account was deleted.
Reset user password
Reset user password
Administrator reset the password for a user.
Set property that forces user to change password
Set force change user password
Administrator set the property that forces a user to change their password the next time the user sign in to Office 365.
Set license properties
Set license properties
Administrator modifies the properties of a licensed assigned to a user.
Updated user
Update user
Administrator changes one or more properties of a user account. For a list of the user properties that can be updated, see the "Update user attributes" section in Azure Active Directory Audit Report Events.