How to Audit Permission Changes in SharePoint 2013
Authored by: Support.com Tech Pro Team
1. Introduction
How to Audit Permission Changes in SharePoint 2013
2. Step 1- Enable Auditing
Following are the steps for enabling native auditing:
Open “SharePoint 2013 Central Administration†→ Go to “Settings†→ “Site Settingsâ€
Navigate to “Site Collection Administration†→ “Site collection†audit settings
Next, select “Editing users and permissionsâ€, and click “OKâ€
Figure 1: Enabling permission change auditing
Navigate to “Settings†→ “Site Settings†→ “Site Collection Administration†→ “Site Collections†features → Activate “Reportingâ€. This step is required only when “Reporting†has not been activated earlier. This step is required if “Reporting†has not been activated earlier. If you have already activated reporting, you can skip this step.
Figure 2: Activating reporting
To find out whether reporting has been enabled or not, go to “Site Collection Administration†and check whether the “Audit log reports†is visible or not.
3. Step 2- View the Permission Changes Report
Perform the following steps:
Go to “Settings†→ “Site settings†→ “Site Collection Administration†→ “Audit Log Reportsâ€
“View Auditing Reports†page appears. In our case, since we want to see permission changes report, you will have to click “Security Settingsâ€
Click “Browse†button to the folder where you want to save the report and click “OKâ€
The “Operation Completed Successfully†page appears, click “click here to view the report†link to save the report on the disk.
Figure 4: Report saved on local disk
The following screenshot shows the native permission change report opened in Microsoft Excel.