{"CreationTime": "2023-10-26T19:22:20", "Id": "2d36e248-ba32-4b94-bb35-a69121e65087", "Operation": "Update company settings", "OrganizationId": "a417c578-c7ee-480d-a225-d48057e74df5", "RecordType": 8, "ResultStatus": "Success", "UserKey": "1003BFFD98415B4E@splunkresearch.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "Company_a417c578-c7ee-480d-a225-d48057e74df5", "UserId": "user30@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"Swagger-Codegen/1.0.0.0/csharp/msal\"}"}, {"Name": "extendedAuditEventCategory", "Value": "Company"}], "ModifiedProperties": [{"Name": "ObjectSettings", "NewValue": "[\r\n  {\r\n    \"Settings\": [\r\n      {\r\n        \"Id\": \"7c5bf263-e0ee-47d6-8c5d-f1f14ef912a1\",\r\n        \"ObjectSettingTemplateId\": \"dffd5d46-495d-40a9-8e21-954ff55e198a\",\r\n        \"Properties\": [\r\n          {\r\n            \"Key\": \"EnableGroupSpecificConsent\",\r\n            \"Value\": \"true\"\r\n          },\r\n          {\r\n            \"Key\": \"BlockUserConsentForRiskyApps\",\r\n            \"Value\": \"False\"\r\n          },\r\n          {\r\n            \"Key\": \"EnableAdminConsentRequests\",\r\n            \"Value\": \"false\"\r\n          },\r\n          {\r\n            \"Key\": \"ConstrainGroupSpecificConsentToMembersOfGroupId\",\r\n            \"Value\": \"\"\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }\r\n]", "OldValue": "[\r\n  {\r\n    \"Settings\": [\r\n      {\r\n        \"Id\": \"7c5bf263-e0ee-47d6-8c5d-f1f14ef912a1\",\r\n        \"ObjectSettingTemplateId\": \"dffd5d46-495d-40a9-8e21-954ff55e198a\",\r\n        \"Properties\": [\r\n          {\r\n            \"Key\": \"EnableGroupSpecificConsent\",\r\n            \"Value\": \"true\"\r\n          },\r\n          {\r\n            \"Key\": \"BlockUserConsentForRiskyApps\",\r\n            \"Value\": \"True\"\r\n          },\r\n          {\r\n            \"Key\": \"EnableAdminConsentRequests\",\r\n            \"Value\": \"false\"\r\n          },\r\n          {\r\n            \"Key\": \"ConstrainGroupSpecificConsentToMembersOfGroupId\",\r\n            \"Value\": \"\"\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }\r\n]"}, {"Name": "Included Updated Properties", "NewValue": "ObjectSettings", "OldValue": ""}], "Actor": [{"ID": "user30@splunkresearch.onmicrosoft.com", "Type": 5}, {"ID": "1003BFFD98415B4E", "Type": 3}, {"ID": "User_e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "InterSystemsId": "cc46d719-4c0f-4b78-8795-b0d6ca5b2065", "IntraSystemId": "92a0d051-2d0d-4608-9d09-6fca619764a2", "SupportTicketId": "", "Target": [{"ID": "Company_a417c578-c7ee-480d-a225-d48057e74df5", "Type": 2}, {"ID": "a417c578-c7ee-480d-a225-d48057e74df5", "Type": 2}, {"ID": "Directory", "Type": 2}, {"ID": "Phantom", "Type": 1}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5"}
{"CreationTime": "2023-10-26T19:22:20", "Id": "83774e72-313f-4d1f-8609-7d0c7bb3b4ff", "Operation": "Update authorization policy.", "OrganizationId": "a417c578-c7ee-480d-a225-d48057e74df5", "RecordType": 8, "ResultStatus": "Success", "UserKey": "1003BFFD98415B4E@splunkresearch.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "AuthorizationPolicy_24484114-1daa-4700-aaf7-44ee5cbe5678", "UserId": "user30@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"Swagger-Codegen/1.0.0.0/csharp/msal\"}"}, {"Name": "extendedAuditEventCategory", "Value": "AuthorizationPolicy"}], "ModifiedProperties": [{"Name": "AllowUserConsentForRiskyApps", "NewValue": "[\r\n  true\r\n]", "OldValue": "[\r\n  false\r\n]"}, {"Name": "PermissionGrantPolicyIdsAssignedToDefaultUserRole", "NewValue": "[\r\n  \"microsoft-user-default-legacy\"\r\n]", "OldValue": "[\r\n  \"ManagePermissionGrantsForSelf.microsoft-user-default-legacy\"\r\n]"}, {"Name": "Included Updated Properties", "NewValue": "AllowUserConsentForRiskyApps, PermissionGrantPolicyIdsAssignedToDefaultUserRole", "OldValue": ""}], "Actor": [{"ID": "user30@splunkresearch.onmicrosoft.com", "Type": 5}, {"ID": "1003BFFD98415B4E", "Type": 3}, {"ID": "User_e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "InterSystemsId": "cc46d719-4c0f-4b78-8795-b0d6ca5b2065", "IntraSystemId": "92a0d051-2d0d-4608-9d09-6fca619764a2", "SupportTicketId": "", "Target": [{"ID": "AuthorizationPolicy_24484114-1daa-4700-aaf7-44ee5cbe5678", "Type": 2}, {"ID": "24484114-1daa-4700-aaf7-44ee5cbe5678", "Type": 2}, {"ID": "Other", "Type": 2}, {"ID": "Authorization Policy", "Type": 1}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5"}
{"CreationTime": "2023-10-26T19:21:26", "Id": "ff99e1ff-504f-42d4-a4b7-d8d20da40000", "Operation": "UserLoggedIn", "OrganizationId": "a417c578-c7ee-480d-a225-d48057e74df5", "RecordType": 15, "ResultStatus": "Success", "UserKey": "e4c722ac-3b83-478d-8f52-c388885dc30f", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "1.2.3.4", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "user30@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "Success"}, {"Name": "UserAgent", "Value": "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E)"}, {"Name": "RequestType", "Value": "Login:reprocess"}], "ModifiedProperties": [], "Actor": [{"ID": "e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 0}, {"ID": "user30@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "ActorIpAddress": "1.2.3.4", "InterSystemsId": "5e79bf5d-970d-4972-863a-99dd65802172", "IntraSystemId": "ff99e1ff-504f-42d4-a4b7-d8d20da40000", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows10"}, {"Name": "BrowserType", "Value": "IE"}, {"Name": "IsCompliantAndManaged", "Value": "False"}, {"Name": "SessionId", "Value": "449c14ae-2647-4a4d-a4a1-811ba1185bd9"}], "ErrorNumber": "0"}