How to Audit Permission Changes in SharePoint 2013

Authored by: Support.com Tech Pro Team

1. Introduction

How to Audit Permission Changes in SharePoint 2013

 

2. Step 1- Enable Auditing

Following are the steps for enabling native auditing:

  1. Open “SharePoint 2013 Central Administration” → Go to “Settings” → “Site Settings”
  2. Navigate to “Site Collection Administration” → “Site collection” audit settings
  3. Next, select “Editing users and permissions”, and click “OK”
Figure 1: Enabling permission change auditing
  1. Navigate to “Settings” → “Site Settings” → “Site Collection Administration” → “Site Collections” features → Activate “Reporting”. This step is required only when “Reporting” has not been activated earlier. This step is required if “Reporting” has not been activated earlier. If you have already activated reporting, you can skip this step.
Figure 2: Activating reporting

To find out whether reporting has been enabled or not, go to “Site Collection Administration” and check whether the “Audit log reports” is visible or not.

3. Step 2- View the Permission Changes Report

Perform the following steps:

  1. Go to “Settings” → “Site settings” → “Site Collection Administration” → “Audit Log Reports”
  2. “View Auditing Reports” page appears. In our case, since we want to see permission changes report, you will have to click “Security Settings”
  1. Click “Browse” button to the folder where you want to save the report and click “OK”
  2. The “Operation Completed Successfully” page appears, click “click here to view the report” link to save the report on the disk.
Figure 4: Report saved on local disk
  1. The following screenshot shows the native permission change report opened in Microsoft Excel.