Microsoft Azure - Security Reports & Alerts
Azure Active Directory enables the administrator to view the security reports that contain different types of data.
Anomalies Reports
This contains any data of sign-in attempt which is normal. If the system detects anything abnormal during the sign-in, it is collected in anomalies report. There are 9 types of reports available under this category, as you can see in the following image.
To view these reports −
Step 1 − Login to the management portal and go to the active directory.
Step 2 − Click ‘Reports’ tab from the top menu.
Step 3 − Click on one of the categories you want to see data for under ‘Anomalous Activity’.
Activity Reports
On the same screen, if you scroll down you will see few reports under the heading ‘Activity Report’. These are the activities like password reset, registration, etc. Each report name is self-explanatory. Currently, there are 4 types of reports under this category.
If you click on one of them, you will be shown the details as in the following image. Here, let’s look for the audit report. You can see 1 activity has come up. All other kinds of reports are listed in the left panel where you can easily navigate through them. Also, you can download the report in CSV format by clicking on the ‘Download’ button at the bottom of the screen.
Integrated Application
This category contains the reports of the usage of cloud application in the organization. This category provides an interactive way to monitor the applications usage.
For example, in the following screen when you click on ‘Application Usage’ in the left panel, you can see that there are 12 sign-ins in App Access Panel and 3 in Visual Studio application.
Search Activity of a Particular User
Azure Active Directory provides one more useful feature that allows the administrator to search an activity for a particular user. As soon as you click on the ‘Reports’ in the top menu, you will see the following screen. You just have to enter the user display name or the user principal name. You will see all directory activities.
In the above screen, we have searched by entering the display name of the user and the user’s activity details with time and date are listed on the screen.
Azure Active Directory Editions and Reports
All kinds of reports are not available in all the editions of Azure Active Directory. The following table lists the types of reports available in three editions of Azure Active Directory.
