> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Directory Audits

Get a list of audit logs generated by Microsoft Entra ID.

* **Least privileged** Microsoft Graph permission to access the action via **application**: `AuditLog.Read.All`, `Directory.Read.All`.

<Note>
  External Documentation

  To learn more, visit the [Microsoft Entra ID documentation](https://learn.microsoft.com/en-us/graph/api/directoryaudit-list?view=graph-rest-1.0\&tabs=http).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter        | Description                                                                                                                                                                                                                                                                                                                                                                                                                   |
  | ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Filter           | Specify a query to filter the results.<br /><br />For example: `activityDisplayName eq 'GroupLifecyclePolicies_Get'`.<br /><br />For more information, please visit [Microsoft's documentation](https://learn.microsoft.com/en-us/graph/filter-query-parameter?tabs=http).                                                                                                                                                    |
  | Limit            | Set the page size of the returned results.                                                                                                                                                                                                                                                                                                                                                                                    |
  | Order By         | Define the attribute to sort the returned items by, along with the sort direction (**asc**/**desc**).<br /><br />For example: `activityDateTime asc`.                                                                                                                                                                                                                                                                         |
  | Return All Pages | Automatically fetch all resources, page by page.                                                                                                                                                                                                                                                                                                                                                                              |
  | Skip Token       | A cursor for the next page of results. This value can be obtained from a previous response, in the `@odata.nextLink` field.<br /><br />**Important**: You must use the same parameter values in the next request as in the previous one when using a **skip token**.<br /><br />For more information, please visit [Microsoft's documentation](https://learn.microsoft.com/en-us/graph/query-parameters?tabs=http#skiptoken). |
</div>

## Example Output

```json theme={"dark"}
{
	"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#auditlogs/directoryaudits",
	"value": [
		{
			"id": "id",
			"category": "UserManagement",
			"correlationId": "da159bfb-54fa-4092-8a38-6e1fa7870e30",
			"result": "success",
			"resultReason": "Successfully added member to group",
			"activityDisplayName": "Add member to group",
			"activityDateTime": "2018-01-09T21:20:02.7215374Z",
			"loggedByService": "Core Directory",
			"initiatedBy": {
				"user": {
					"id": "728309ae-1a37-4937-9afe-e35d964db09b",
					"displayName": "Audry Oliver",
					"userPrincipalName": "bob@wingtiptoysonline.com",
					"ipAddress": "127.0.0.1"
				},
				"app": null
			},
			"targetResources": [
				{
					"id": "ef7e527d-6c92-4234-8c6d-cf6fdfb57f95",
					"displayName": "Example.com",
					"Type": "Group",
					"modifiedProperties": [
						{
							"displayName": "Action Client Name",
							"oldValue": null,
							"newValue": "DirectorySync"
						}
					],
					"groupType": "unifiedGroups"
				},
				{
					"id": "1f0e98f5-3161-4c6b-9b50-d488572f2bb7",
					"displayName": null,
					"Type": "User",
					"modifiedProperties": [],
					"userPrincipalName": "bob@contoso.com"
				}
			],
			"additionalDetails": [
				{
					"key": "Additional Detail Name",
					"value": "Additional Detail Value"
				}
			]
		}
	]
}
```

## Workflow Library Example

[List Directory Audits with Microsoft Entra Id and Send Results Via Email](https://library.blinkops.com/workflows/list-directory-audits-with-microsoft-entra-id-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/list-directory-audits-with-microsoft-entra-id-and-send-results-via-email/canvas" />
</div>