On Demand Audit provides the following Microsoft Entra built-in searches that are based on the most common and complex requests for information:
- Microsoft Entra application events in the past 7 days
- Microsoft Entra directory events in the past 7 days
- Microsoft Entra events in the past 7 days
- Microsoft Entra failed sign-in events in the past 7 days
- Microsoft Entra group events in the past 7 days
- Microsoft Entra group member changes in the past 7 days
- Microsoft Entra group owner changes in the past 7 days
- Microsoft Entra risk events in the past 7 days
- Microsoft Entra role events in the past 7 days
- Microsoft Entra role member changes in the past 7 days
- Microsoft Entra self-service password management events in the past 7 days
- Microsoft Entra sign-in events in the past 7 days
- Microsoft Entra successful sign-in events in the past 7 days
- Microsoft Entra tenant level configuration changes in the last 180 days
- Microsoft Entra user created events in the past 7 days
- Microsoft Entra user deleted events in the past 7 days
- Microsoft Entra user events in the past 7 days
- Important changes for critical Microsoft Entra directory roles in the past 7 days
- Objects added/removed from Microsoft Entra groups in the past 7 days
- Objects added/removed from Microsoft Entra roles in the past 7 days
- Users added/removed as owner of Microsoft Entra groups in the past 7 days