The following table lists the user and admin activities in Yammer that are logged in the Office 365 audit log. To return Yammer-related activities from the Office 365 audit log, you have to select Show results for all activities in the Activities list. Use the date range boxes and the Users list to narrow the search results.
|Accepted network usage policy
||User accepts the usage policy for the Yammer network.
||New user activates their account.
|Added or removed network admin
||Network or verified admin assigns or revokes network admin permissions to a user.
|Added or removed verified admin
||Verified admin assigns or revokes verified admin permissions to a user. Only verified admins can perform this operation.
|Added user to group
||User adds another user to a group.
|Bulk-created new users
||Verified admin uses a CSV file to create multiple user accounts. Only verified admins can perform this operation.
|Changed data retention policy
||Verified admin updates the setting for the network data retention policy to either Hard Delete or Soft Delete. Only verified admins can perform this operation.
|Changed group privacy setting
||Group admin changes the privacy setting of a group to Private Access or Public Access.
|Changed network configuration
||Network or verified admin changes the Yammer network's configuration. This includes setting the interval for exporting data and enabling chat.
|Changed network profile settings
||Network or verified admin changes the information that appears on member profiles for network users network.
|Changed network usage policy
||User updates the Yammer network's usage policy.
|Changed private content mode
||Verified admin turns Private Content Mode on or off. This mode lets an admin view posts in private groups and view private messages between individual users (or groups of users). Only verified admins only can perform this operation.
|Changed security configuration
||Verified admin updates the Yammer network's security configuration. This includes setting password expiration policies and restrictions on IP addresses. Only verified admins can perform this operation.
||User uploads a file.
||User creates a new group.
||User deletes a file.
||A group is deleted from Yammer.
||User deletes a message.
|Deleted network user
||Network or verified admin deletes a user from Yammer.
NOTE: A network admin can't delete a verified admin.
||User account is deleted.
||User downloads a file.
||Verified admin exports Yammer network data. Only verified admins can perform this operation.
|Forced all users to log out
||Verified admin forces all users to log out across all Yammer clients. Only verified admins can perform this operation.
|Removed user from group
||User removes a member from a group.
||User shares a file with another user.
|Suspended network user
||Network or verified admin suspends (deactivates) a user from Yammer.
||User account is suspended (deactivated).
|Updated file description
||User changes the description of a file.
|Updated file name
||User changes the name of a file.
||User views a file.