Microsoft Power Platform Admin Activity
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | MicrosoftPowerPlatformAdminActivity |
| Publisher | Microsoft |
| Used in Solutions | Microsoft Business Applications |
| Collection Method | Unknown |
| Connector Definition Files | mainTemplate.json |
| Microsoft Learn | View on Learn |
Microsoft Power Platform is a low-code/no-code suite empowering both citizen and pro developers to streamline business processes by enabling the creation of custom apps, automation of workflows, and data analysis with minimal coding. The Power Platform Admin data connector provides the capability to ingest Power Platform administrator activity logs from the Microsoft Purview Audit log into Microsoft Sentinel.
Additional Information
- 📖 Solution Overview: Microsoft Business Apps solution - Monitor and protect Power Platform and Dynamics 365 environments
- 📖 Deployment Guide: Deploy Power Platform connectors - Prerequisites and setup for Power Platform admin activity logging
- 📖 Security Content: Power Platform security content reference - Analytics rules for Power Platform admin activity monitoring
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
PowerPlatformAdminActivity |
✓ | ✗ | ✓ |
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
- Keys (Workspace): Read permissions to shared keys for the workspace are required. See the documentation to learn more about workspace keys
Custom Permissions:
- Tenant Permissions: 'Security Administrator' or 'Global Administrator' on the workspace's tenant.
- Micorosft Purview Audit: Microsoft Purview Audit (Standard or Premium) must be activated.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect Microsoft Power Platform Admin Activity audit logs to Microsoft Sentinel
This connector uses the Office Management API to get your Power Platform administrator audit logs. The logs will be stored and processed in your existing Microsoft Sentinel workspace. You can find the data in the PowerPlatformAdminActivity table.
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊