As an IT admin interested in governance, risk management, or compliance, you can get a clear view into how users are getting access.

As a Security admin, you now can use the Azure AD sign-in and audit logs in tandem with security logs published by Azure Security Center to assess the impact and scope of a security breach by analyzing all the user activities performed, thereby, giving answers to questions like: “What did this user access while the breach happened?” and “What resources does the user have access to?”.Query using AppInsights and Azure AD logs. As an Application owner, you can troubleshoot that nagging performance bottleneck on your app’s sign-in page by correlating application performance data from Azure Application Insights.User consent and sign-ins associated with those users. As a SecOps admin, you can easily correlate sign-in activities of your users or apps in your tenant with any CRUD operations performed to get a complete picture of what’s going on with your Azure resources.Legacy- and conditional access-based sign-ins. For example, you can identify users or apps that use legacy auth sign-ins or generate an alert to notify you when a high-risk user using legacy auth sign-ins. As an IT admin, you can easily troubleshoot key issues in your tenant and monitor them through alerts and notifications.This integration gives you the richness of data available through Azure AD logs to resolve cross-service scenarios. Today, I’m excited to announce the availability of one of our top-requested features: the ability to forward your Azure AD logs to Azure Log Analytics! With this integration, Log Analytics gives you the power to query huge amounts of your Azure AD data to find events, analyze trends, and create rich visualizations within minutes. You’ve told us you need access to all this data to do all kinds of analytics for business, operations, and security processes, and to also monitor Azure AD as a critical component of your infrastructure. As more and more of you adopt Azure Active Directory (AD)-the service now manages 1.1 BILLION (!!!) identities-we’ve received a ton of requests to make it easier to access and analyze the huge amounts of data the service creates on your behalf.

Aad logs