Search the audit log in the Office 365 Security & Compliance Center - Audited Activities | Application administration activities

Created by Akshit Kapoor, Modified on Fri, 24 Feb, 2017 at 2:27 PM by Akshit Kapoor

The following table lists application admin activities that are logged when an admin adds or changes an application that's registered in Azure AD. Any application that relies on Azure AD for authentication must be registered in the directory.

Friendly name	Operation	Description
Added delegation entry	Add delegation entry	A authentication permission was created/granted to an application in Azure AD.
Added service principal	Add service principal	An application was registered in Azure AD. An application is represented by a service principal in the directory.
Added credentials to a service principal	Add service principal credentials	Credentials were added to a service principal in Azure AD. A service principle represents an application in the directory.
Removed delegation entry	Remove delegation entry	A authentication permission was removed from an application in Azure AD.
Removed a service principal from the directory	Remove service principal	An application was deleted/unregistered from Azure AD. An application is represented by a service principal in the directory.
Removed credentials from a service principal	Remove service principal credentials	Credentials were removed from a service principal in Azure AD. A service principle represents an application in the directory.
Set delegation entry	Set delegation entry	An authentication permission was updated for an application in Azure AD.