{"time": "2023-06-20T16:27:26.4483111Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "52.177.250.168", "correlationId": "54d50f13-d74c-4f2d-beea-71a429ebaf74", "Level": 4, "properties": {"id": "Directory_54d50f13-d74c-4f2d-beea-71a429ebaf74_8RGXO_289573479", "category": "RoleManagement", "correlationId": "54d50f13-d74c-4f2d-beea-71a429ebaf74", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T16:27:26.4483111+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "3bd47e42-37c9-442f-a2b4-f04de61ef0ce", "displayName": null, "userPrincipalName": "strt_admin@splunkresearch.com", "ipAddress": "52.177.250.168", "roles": []}}, "targetResources": [{"id": "dd92f1af-43d7-47d9-b93c-a78c6b635180", "displayName": null, "type": "User", "userPrincipalName": "Abigail.Clark@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"4c609f03-ed46-4684-8ce9-40b7d632fbe1\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Global Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"62e90394-69f5-4237-9190-012177145e10\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"TenantAdmins\""}], "administrativeUnits": []}, {"id": "4c609f03-ed46-4684-8ce9-40b7d632fbe1", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": []}}
{"time": "2023-06-20T15:54:20.1049758Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "264c7312-ed9e-400f-b224-a3740cfd328e", "Level": 4, "properties": {"id": "Directory_264c7312-ed9e-400f-b224-a3740cfd328e_HQ9FN_370186032", "category": "RoleManagement", "correlationId": "264c7312-ed9e-400f-b224-a3740cfd328e", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:20.1049758+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "2e8e6408-5696-472e-a1ef-565818455078", "displayName": null, "type": "User", "userPrincipalName": "James.Wilson@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"697e811d-67d7-4924-aae7-9cb1098423c5\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Groups Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"fdd7a751-b60b-444a-984c-02652fe8fa1c\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"GroupsAdmins\""}], "administrativeUnits": []}, {"id": "697e811d-67d7-4924-aae7-9cb1098423c5", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:19.6915011Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "de0c7c41-8ec2-417c-a5dd-13393a9f4c09", "Level": 4, "properties": {"id": "Directory_de0c7c41-8ec2-417c-a5dd-13393a9f4c09_84UUP_247223421", "category": "RoleManagement", "correlationId": "de0c7c41-8ec2-417c-a5dd-13393a9f4c09", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:19.6915011+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "cb87df9f-d1a8-41ae-a3ec-d9615e8402c5", "displayName": null, "type": "User", "userPrincipalName": "Christopher.Collins@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"e634b157-7df0-44bb-b9f4-c5e5cce87e90\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Message Center Reader\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"790c1fb9-7f7d-4f88-86a1-ef1f95c05c1b\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"MessageCenterReaders\""}], "administrativeUnits": []}, {"id": "e634b157-7df0-44bb-b9f4-c5e5cce87e90", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:19.2814515Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "6275ec8d-91fd-4f8c-924f-80092cb2c684", "Level": 4, "properties": {"id": "Directory_6275ec8d-91fd-4f8c-924f-80092cb2c684_84UUP_247221150", "category": "RoleManagement", "correlationId": "6275ec8d-91fd-4f8c-924f-80092cb2c684", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:19.2814515+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "cf43766f-eeb9-4527-ab61-5d1986f69b86", "displayName": null, "type": "User", "userPrincipalName": "Emily.Lewis@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"cf7d0396-3147-4b9e-bcea-1ae7eef511b0\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Guest Inviter\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"95e79109-95c0-4d8e-aee3-d01accf2d47b\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"GuestInviters\""}], "administrativeUnits": []}, {"id": "cf7d0396-3147-4b9e-bcea-1ae7eef511b0", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:18.8370634Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "990f8fbd-b257-490a-aea7-5b3a5c55d79b", "Level": 4, "properties": {"id": "Directory_990f8fbd-b257-490a-aea7-5b3a5c55d79b_HIPOY_111065896", "category": "RoleManagement", "correlationId": "990f8fbd-b257-490a-aea7-5b3a5c55d79b", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:18.8370634+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "eb501ff7-d7c3-4ecf-a3d7-ca2fcf72892f", "displayName": null, "type": "User", "userPrincipalName": "Paul.Morgan@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"9557e007-4039-40cf-8c6d-6d7a85af88ba\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Directory Readers\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"88d8e3e3-8f55-4a1e-953a-9b9898b8876b\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"DirectoryReaders\""}], "administrativeUnits": []}, {"id": "9557e007-4039-40cf-8c6d-6d7a85af88ba", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:18.3746640Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "90348a50-90a4-473b-81c3-8f99cd099b36", "Level": 4, "properties": {"id": "Directory_90348a50-90a4-473b-81c3-8f99cd099b36_1FDI8_95500752", "category": "RoleManagement", "correlationId": "90348a50-90a4-473b-81c3-8f99cd099b36", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:18.374664+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "dd92f1af-43d7-47d9-b93c-a78c6b635180", "displayName": null, "type": "User", "userPrincipalName": "Abigail.Clark@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"91d92c84-416d-4e61-830b-3d9428f7d85d\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Authentication Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"c4e39bd9-1100-46d3-8c65-fb160da0071f\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"AuthenticationAdmins\""}], "administrativeUnits": []}, {"id": "91d92c84-416d-4e61-830b-3d9428f7d85d", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:17.6094114Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "5ffffcc7-b375-462f-9f1b-fdb8fdcd6bcf", "Level": 4, "properties": {"id": "Directory_5ffffcc7-b375-462f-9f1b-fdb8fdcd6bcf_C21RW_365296654", "category": "RoleManagement", "correlationId": "5ffffcc7-b375-462f-9f1b-fdb8fdcd6bcf", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:17.6094114+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "c3519f1b-6d63-41ab-a868-c81067f72b0e", "displayName": null, "type": "User", "userPrincipalName": "Evelyn.Martinez@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"21d212ba-c459-47fd-94b7-c80a8708664d\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Helpdesk Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"729827e3-9c14-49f7-bb1b-9608f156bbb8\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"HelpdeskAdmins\""}], "administrativeUnits": []}, {"id": "21d212ba-c459-47fd-94b7-c80a8708664d", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:17.0909462Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "866b2e1d-7a08-4c65-b942-8a94e0563fe8", "Level": 4, "properties": {"id": "Directory_866b2e1d-7a08-4c65-b942-8a94e0563fe8_HQ9FN_370178436", "category": "RoleManagement", "correlationId": "866b2e1d-7a08-4c65-b942-8a94e0563fe8", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:17.0909462+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "d81f80cc-db83-4c91-a409-46c5fe474220", "displayName": null, "type": "User", "userPrincipalName": "Mason.Garcia@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"5fc6e127-5fbe-43c2-8cc4-3df51edae06c\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Reports Reader\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"4a5d8f65-41da-4de4-8968-e035b65339cf\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"ReportsReaders\""}], "administrativeUnits": []}, {"id": "5fc6e127-5fbe-43c2-8cc4-3df51edae06c", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:16.6657718Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "730fc2a7-4327-4180-a027-e314ac3a4d6a", "Level": 4, "properties": {"id": "Directory_730fc2a7-4327-4180-a027-e314ac3a4d6a_84UUP_247214286", "category": "RoleManagement", "correlationId": "730fc2a7-4327-4180-a027-e314ac3a4d6a", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:16.6657718+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "5abd5bac-8f35-40f2-ac39-bb2eb2b57a80", "displayName": null, "type": "User", "userPrincipalName": "William.Davis@splunkresearch.com", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"5fc6e127-5fbe-43c2-8cc4-3df51edae06c\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Reports Reader\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"4a5d8f65-41da-4de4-8968-e035b65339cf\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"ReportsReaders\""}], "administrativeUnits": []}, {"id": "5fc6e127-5fbe-43c2-8cc4-3df51edae06c", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}]}}
{"time": "2023-06-20T15:54:10.5275889Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "c36fce3d-63a0-4494-941e-946e50e794b7", "Level": 4, "properties": {"id": "Directory_c36fce3d-63a0-4494-941e-946e50e794b7_1FDI8_95479737", "category": "RoleManagement", "correlationId": "c36fce3d-63a0-4494-941e-946e50e794b7", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:10.5275889+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "7c8d3cef-e769-4e34-ba9e-08e3e2a85ce0", "displayName": "CloudForge", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"26ed7e87-d047-4e45-bf76-fd4eb39be624\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Privileged Role Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"e8611ab8-c189-46e8-94e1-60213ab1f814\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"PrivilegedRoleAdmins\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"f0748f3d-45f2-4e2e-a4e1-f2e2b5271bdf\""}], "administrativeUnits": []}, {"id": "26ed7e87-d047-4e45-bf76-fd4eb39be624", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "f0748f3d-45f2-4e2e-a4e1-f2e2b5271bdf"}]}}
{"time": "2023-06-20T15:54:09.9419586Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "25dedb34-baad-4783-8779-e0fb48489a71", "Level": 4, "properties": {"id": "Directory_25dedb34-baad-4783-8779-e0fb48489a71_HIPOY_111036543", "category": "RoleManagement", "correlationId": "25dedb34-baad-4783-8779-e0fb48489a71", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:09.9419586+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "c71349ca-1eab-47a4-90e1-eb7154caf0c3", "displayName": "CodeCompiler", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"40d5fae3-b6bb-4be6-b246-74d5af897b28\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Application Developer\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"cf1c38e5-3621-4004-a7cb-879624dced7c\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"ApplicationDevelopers\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"464d0f35-a0f6-4130-b55f-a5b542d2ad11\""}], "administrativeUnits": []}, {"id": "40d5fae3-b6bb-4be6-b246-74d5af897b28", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "464d0f35-a0f6-4130-b55f-a5b542d2ad11"}]}}
{"time": "2023-06-20T15:54:09.2618552Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "5eb29c1f-fa67-4e7f-bf61-833a698bee72", "Level": 4, "properties": {"id": "Directory_5eb29c1f-fa67-4e7f-bf61-833a698bee72_HQ9FN_370154858", "category": "RoleManagement", "correlationId": "5eb29c1f-fa67-4e7f-bf61-833a698bee72", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:09.2618552+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "5da5c528-f082-4486-8dcc-f8e1e377f5d9", "displayName": "DataSwitch", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"81476713-c8f1-481d-b4c7-2944c3e6b3c8\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Attack Simulation Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"c430b396-e693-46cc-96f3-db01bf8bb62a\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"AttackSimulationAdmins\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"e86da872-0441-46b9-99d8-71c9779a29ef\""}], "administrativeUnits": []}, {"id": "81476713-c8f1-481d-b4c7-2944c3e6b3c8", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "e86da872-0441-46b9-99d8-71c9779a29ef"}]}}
{"time": "2023-06-20T15:54:08.5441826Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "0ee68532-d4c0-483a-b0fb-e28ebd0f469f", "Level": 4, "properties": {"id": "Directory_0ee68532-d4c0-483a-b0fb-e28ebd0f469f_V78IG_314432532", "category": "RoleManagement", "correlationId": "0ee68532-d4c0-483a-b0fb-e28ebd0f469f", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:08.5441826+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "47ce0d9b-a708-4da2-8719-27e0a7f95038", "displayName": "DataMover", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"df3927d2-85c4-46b9-b8a5-04469d28583e\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Intune Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"3a2c62db-5318-420d-8d74-23affee5d9d5\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"IntuneServiceAdmins\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"da28f090-1231-41ba-8b18-a38d357beb72\""}], "administrativeUnits": []}, {"id": "df3927d2-85c4-46b9-b8a5-04469d28583e", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "da28f090-1231-41ba-8b18-a38d357beb72"}]}}
{"time": "2023-06-20T15:54:07.8876085Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "7af08b25-506d-4f4a-a7b3-63ef74839c49", "Level": 4, "properties": {"id": "Directory_7af08b25-506d-4f4a-a7b3-63ef74839c49_84UUP_247188906", "category": "RoleManagement", "correlationId": "7af08b25-506d-4f4a-a7b3-63ef74839c49", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:07.8876085+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "6c218bcf-845b-4817-b0f0-3b547a9ee2d5", "displayName": "CloudSentry", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"52baf808-1030-483e-8755-a64784321e28\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Network Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"d37c8bed-0711-4417-ba38-b4abe66ce4c2\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"NetworkAdmins\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"b1ebae90-36c9-4be8-89d3-4b48e6b8501e\""}], "administrativeUnits": []}, {"id": "52baf808-1030-483e-8755-a64784321e28", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "b1ebae90-36c9-4be8-89d3-4b48e6b8501e"}]}}
{"time": "2023-06-20T15:54:07.3368379Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "5effd7ec-51da-477c-852f-3a333135e31e", "Level": 4, "properties": {"id": "Directory_5effd7ec-51da-477c-852f-3a333135e31e_HQ9FN_370148939", "category": "RoleManagement", "correlationId": "5effd7ec-51da-477c-852f-3a333135e31e", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:07.3368379+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "6890f87f-bfeb-43f9-8496-152c9642458d", "displayName": "DataPipeline", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"ff16018a-a7df-47b6-9d25-628c21ec1078\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Security Operator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"5f2222b1-57c3-48ba-8ad5-d4759f1fde6f\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"M365SecurityOperator\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"9726f706-2f7e-4177-bf7e-6fb9a5fda571\""}], "administrativeUnits": []}, {"id": "ff16018a-a7df-47b6-9d25-628c21ec1078", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "9726f706-2f7e-4177-bf7e-6fb9a5fda571"}]}}
{"time": "2023-06-20T15:54:06.7671497Z", "resourceId": "/tenants/fc69e276-e9e8-4af9-9002-1e410d77244e/providers/Microsoft.aadiam", "operationName": "Add member to role", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "fc69e276-e9e8-4af9-9002-1e410d77244e", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "20.190.135.43", "correlationId": "e78fd442-66ee-42d5-ae21-790b692b725a", "Level": 4, "properties": {"id": "Directory_e78fd442-66ee-42d5-ae21-790b692b725a_V78IG_314427592", "category": "RoleManagement", "correlationId": "e78fd442-66ee-42d5-ae21-790b692b725a", "result": "success", "resultReason": "", "activityDisplayName": "Add member to role", "activityDateTime": "2023-06-20T15:54:06.7671497+00:00", "loggedByService": "Core Directory", "operationType": "Assign", "userAgent": null, "initiatedBy": {"user": {"id": "4d3f1865-b395-4430-91dc-1b9dd337712e", "displayName": null, "userPrincipalName": "globaladmin@splunkresearch.com", "ipAddress": "20.190.135.43", "roles": []}}, "targetResources": [{"id": "860b19d6-3ecb-432d-ab39-2c8c8a843794", "displayName": "CloudConnector", "type": "ServicePrincipal", "modifiedProperties": [{"displayName": "Role.ObjectID", "oldValue": null, "newValue": "\"5b250545-2626-47cb-ab9e-d7bebd0583d7\""}, {"displayName": "Role.DisplayName", "oldValue": null, "newValue": "\"Exchange Administrator\""}, {"displayName": "Role.TemplateId", "oldValue": null, "newValue": "\"29232cdf-9323-42fd-ade2-1d097af3e4de\""}, {"displayName": "Role.WellKnownObjectName", "oldValue": null, "newValue": "\"ExchangeServiceAdmins\""}, {"displayName": "TargetId.ServicePrincipalNames", "oldValue": null, "newValue": "\"fa837256-c2a7-4b22-9125-60a92958f058\""}], "administrativeUnits": []}, {"id": "5b250545-2626-47cb-ab9e-d7bebd0583d7", "displayName": null, "type": "Role", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Darwin 22.4.0 Darwin Kernel Version 22.4.0: Mon Mar  6 21:00:17 PST 2023; root:xnu-8796.101.5~3/RELEASE_X86_64; en-US) PowerShell/7.3.4"}, {"key": "AppId", "value": "fa837256-c2a7-4b22-9125-60a92958f058"}]}}