Date (UTC),CorrelationId,Service,Category,Activity,Result,ResultReason,User Agent,ActorType,ActorDisplayName,ActorObjectId,ActorUserPrincipalName,IPAddress,ActorHomeTenantId,ActorHomeTenantName,ActorServicePrincipalId,ActorServicePrincipalName,Target1Type,Target1DisplayName,Target1ObjectId,Target1UserPrincipalName,Target1ModifiedProperty1Name,Target1ModifiedProperty1OldValue,Target1ModifiedProperty1NewValue,Target1ModifiedProperty2Name,Target1ModifiedProperty2OldValue,Target1ModifiedProperty2NewValue,Target1ModifiedProperty3Name,Target1ModifiedProperty3OldValue,Target1ModifiedProperty3NewValue,Target1ModifiedProperty4Name,Target1ModifiedProperty4OldValue,Target1ModifiedProperty4NewValue,Target1ModifiedProperty5Name,Target1ModifiedProperty5OldValue,Target1ModifiedProperty5NewValue,Target2Type,Target2DisplayName,Target2ObjectId,Target2UserPrincipalName,Target2ModifiedProperty1Name,Target2ModifiedProperty1OldValue,Target2ModifiedProperty1NewValue,Target2ModifiedProperty2Name,Target2ModifiedProperty2OldValue,Target2ModifiedProperty2NewValue,Target2ModifiedProperty3Name,Target2ModifiedProperty3OldValue,Target2ModifiedProperty3NewValue,Target2ModifiedProperty4Name,Target2ModifiedProperty4OldValue,Target2ModifiedProperty4NewValue,Target2ModifiedProperty5Name,Target2ModifiedProperty5OldValue,Target2ModifiedProperty5NewValue,Target3Type,Target3DisplayName,Target3ObjectId,Target3UserPrincipalName,Target3ModifiedProperty1Name,Target3ModifiedProperty1OldValue,Target3ModifiedProperty1NewValue,Target3ModifiedProperty2Name,Target3ModifiedProperty2OldValue,Target3ModifiedProperty2NewValue,Target3ModifiedProperty3Name,Target3ModifiedProperty3OldValue,Target3ModifiedProperty3NewValue,Target3ModifiedProperty4Name,Target3ModifiedProperty4OldValue,Target3ModifiedProperty4NewValue,Target3ModifiedProperty5Name,Target3ModifiedProperty5OldValue,Target3ModifiedProperty5NewValue,AdditionalDetail1Key,AdditionalDetail1Value,AdditionalDetail2Key,AdditionalDetail2Value,AdditionalDetail3Key,AdditionalDetail3Value,AdditionalDetail4Key,AdditionalDetail4Value,AdditionalDetail5Key,AdditionalDetail5Value,AdditionalDetail6Key,AdditionalDetail6Value
2022-08-29T15:53:20.1113474+00:00,7fb435db-2698-4883-9cdf-ea97e9050371,Core Directory,UserManagement,Update user,Success,,,Application,Microsoft Substrate Management,,,,,,46e40a6b-2847-42ec-9b3b-f02769d957a7,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,TargetId.UserType,,"""""",ActorId.ServicePrincipalNames,,"""98db8bd6-0cc0-4e67-9de5-f187f1cd1b41""",SPN,,"""98db8bd6-0cc0-4e67-9de5-f187f1cd1b41""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,,,,,,,,,,,{84},{85}
2022-08-17T13:51:03.8838018+00:00,9c0f560d-f088-4b8e-9298-815dd53e7999,Core Directory,UserManagement,Update user,Success,,,User,,00000000-0000-0000-0000-000000000000,fim_password_service@support.onmicrosoft.com,,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,StrongAuthenticationPhoneAppDetail,"[{""DeviceName"":""iPhone"",""DeviceToken"":""apns2-63c05fd1f3dcecb08bee8afec7b689dfbc4e02a8a2123fd48e75352db50d8641"",""DeviceTag"":""SoftwareTokenActivated"",""PhoneAppVersion"":""6.5.86"",""OathTokenTimeDrift"":0,""DeviceId"":null,""Id"":""f6f23e69-6a20-4cc6-b345-15598cc4cea6"",""TimeInterval"":null,""AuthenticationType"":3,""NotificationType"":2,""LastAuthenticatedTimestamp"":""2022-08-08T19:17:31.0697166Z"",""AuthenticatorFlavor"":null,""HashFunction"":null,""TenantDeviceId"":null,""SecuredPartitionId"":0,""SecuredKeyId"":0}]","[{""DeviceName"":""iPhone"",""DeviceToken"":""apns2-63c05fd1f3dcecb08bee8afec7b689dfbc4e02a8a2123fd48e75352db50d8641"",""DeviceTag"":""SoftwareTokenActivated"",""PhoneAppVersion"":""6.5.86"",""OathTokenTimeDrift"":0,""DeviceId"":null,""Id"":""f6f23e69-6a20-4cc6-b345-15598cc4cea6"",""TimeInterval"":null,""AuthenticationType"":3,""NotificationType"":2,""LastAuthenticatedTimestamp"":""2022-08-17T13:51:03.77522Z"",""AuthenticatorFlavor"":null,""HashFunction"":null,""TenantDeviceId"":null,""SecuredPartitionId"":0,""SecuredKeyId"":0}]",Included Updated Properties,,"""StrongAuthenticationPhoneAppDetail""",TargetId.UserType,,"""""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,,,,,,,,,,,{84},{85}
2022-08-08T19:23:40.0620322+00:00,b56090f8-7c3b-4c5a-9f1b-c99839fa1c36,Core Directory,UserManagement,Update user,Success,,,User,,00000000-0000-0000-0000-000000000000,fim_password_service@support.onmicrosoft.com,,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,StrongAuthenticationPhoneAppDetail,"[{""DeviceName"":""iPhone"",""DeviceToken"":""apns2-63c05fd1f3dcecb08bee8afec7b689dfbc4e02a8a2123fd48e75352db50d8641"",""DeviceTag"":""SoftwareTokenActivated"",""PhoneAppVersion"":""6.5.86"",""OathTokenTimeDrift"":-1,""DeviceId"":null,""Id"":""f6f23e69-6a20-4cc6-b345-15598cc4cea6"",""TimeInterval"":null,""AuthenticationType"":3,""NotificationType"":2,""LastAuthenticatedTimestamp"":""2022-08-08T19:17:31.0697166Z"",""AuthenticatorFlavor"":null,""HashFunction"":null,""TenantDeviceId"":null,""SecuredPartitionId"":0,""SecuredKeyId"":0}]","[{""DeviceName"":""iPhone"",""DeviceToken"":""apns2-63c05fd1f3dcecb08bee8afec7b689dfbc4e02a8a2123fd48e75352db50d8641"",""DeviceTag"":""SoftwareTokenActivated"",""PhoneAppVersion"":""6.5.86"",""OathTokenTimeDrift"":0,""DeviceId"":null,""Id"":""f6f23e69-6a20-4cc6-b345-15598cc4cea6"",""TimeInterval"":null,""AuthenticationType"":3,""NotificationType"":2,""LastAuthenticatedTimestamp"":""2022-08-08T19:17:31.0697166Z"",""AuthenticatorFlavor"":null,""HashFunction"":null,""TenantDeviceId"":null,""SecuredPartitionId"":0,""SecuredKeyId"":0}]",Included Updated Properties,,"""StrongAuthenticationPhoneAppDetail""",TargetId.UserType,,"""""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,,,,,,,,,,,{84},{85}
2022-08-08T19:17:31.1937072+00:00,e2e3fccb-b4e7-47d2-91ed-c4348c99a039,Core Directory,UserManagement,Update user,Success,,,User,,00000000-0000-0000-0000-000000000000,fim_password_service@support.onmicrosoft.com,,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,StrongAuthenticationPhoneAppDetail,"[{""DeviceName"":""iPhone"",""DeviceToken"":""apns2-63c05fd1f3dcecb08bee8afec7b689dfbc4e02a8a2123fd48e75352db50d8641"",""DeviceTag"":""SoftwareTokenActivated"",""PhoneAppVersion"":""6.5.86"",""OathTokenTimeDrift"":-1,""DeviceId"":null,""Id"":""f6f23e69-6a20-4cc6-b345-15598cc4cea6"",""TimeInterval"":null,""AuthenticationType"":3,""NotificationType"":2,""LastAuthenticatedTimestamp"":""2022-08-01T20:12:44.3181337Z"",""AuthenticatorFlavor"":null,""HashFunction"":null,""TenantDeviceId"":null,""SecuredPartitionId"":0,""SecuredKeyId"":0}]","[{""DeviceName"":""iPhone"",""DeviceToken"":""apns2-63c05fd1f3dcecb08bee8afec7b689dfbc4e02a8a2123fd48e75352db50d8641"",""DeviceTag"":""SoftwareTokenActivated"",""PhoneAppVersion"":""6.5.86"",""OathTokenTimeDrift"":-1,""DeviceId"":null,""Id"":""f6f23e69-6a20-4cc6-b345-15598cc4cea6"",""TimeInterval"":null,""AuthenticationType"":3,""NotificationType"":2,""LastAuthenticatedTimestamp"":""2022-08-08T19:17:31.0697166Z"",""AuthenticatorFlavor"":null,""HashFunction"":null,""TenantDeviceId"":null,""SecuredPartitionId"":0,""SecuredKeyId"":0}]",Included Updated Properties,,"""StrongAuthenticationPhoneAppDetail""",TargetId.UserType,,"""""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,,,,,,,,,,,{84},{85}
2022-08-02T19:03:40.7236174+00:00,e6e7b175-62db-46fd-a491-f8cc13fd64be,Core Directory,UserManagement,Update user,Success,,,Application,Microsoft App Access Panel,,,,,,2d649b40-8b49-4a3c-b12b-e8ffdbb6e162,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,Included Updated Properties,,"""""",TargetId.UserType,,"""""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,User-Agent,Microsoft ADO.NET Data Services,,,,,,,,,{84},{85}
2022-08-02T18:54:28.8436904+00:00,ca45037f-793d-4db1-909d-b4abea1967bc,Self-service Password Management,UserManagement,User started security info registration for self-service password reset,Success,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,68.x.x.x,,,,,User,John Doe,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}
2022-08-02T18:54:20.7204858+00:00,4a366cbd-2e8e-4401-9aa6-459cb0cdebd7,Core Directory,UserManagement,Update user,Success,,,Application,Microsoft App Access Panel,,,,,,2d649b40-8b49-4a3c-b12b-e8ffdbb6e162,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,Included Updated Properties,,"""""",TargetId.UserType,,"""""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,User-Agent,Microsoft ADO.NET Data Services,,,,,,,,,{84},{85}
2022-08-02T18:54:20.2976935+00:00,3a2bf54f-7deb-462c-9826-02ca56102d42,Self-service Password Management,UserManagement,Security info saved for self-service password reset,Success,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,68.x.x.x,,,,,User,John Doe,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}
2022-08-02T18:54:19.7708068+00:00,bf430061-033c-4554-8b1f-90905d7c937c,Self-service Password Management,UserManagement,User completed security info registration for self-service password reset,Success,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,68.x.x.x,,,,,User,John Doe,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}
2022-08-02T18:54:07.2230596+00:00,a0a24fb3-9c45-4a8a-b81c-c86321580e63,Self-service Password Management,UserManagement,User started security info registration for self-service password reset,Success,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,68.x.x.x,,,,,User,John Doe,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}
2022-08-02T18:53:02.707126+00:00,e0dc4e7f-05e4-44f9-855b-d9817be7a357,Self-service Password Management,UserManagement,Change password (self-service),Success,None,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,User,John Doe,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,OnPremisesAgent,None,,,,,,,,,,,{84},{85}
2022-08-02T18:53:02.7064525+00:00,0afc558e-eb86-40a8-8063-708004520176,Core Directory,UserManagement,Change user password,Success,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}
2022-08-02T18:53:02.7064525+00:00,0afc558e-eb86-40a8-8063-708004520176,Core Directory,UserManagement,Update StsRefreshTokenValidFrom Timestamp,Success,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}
2022-08-02T18:47:21.094202+00:00,18adff97-e789-46b9-be58-6bec8d46f203,Core Directory,UserManagement,Update user,Success,,,User,,e359fcbe-cb50-4731-9623-ff0c954f3248,admin1@contoso.com,207.x.x.x,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,StsRefreshTokensValidFrom,"[""2020-09-29T18:51:53Z""]","[""2022-08-02T18:47:21Z""]",Included Updated Properties,,"""StsRefreshTokensValidFrom""",TargetId.UserType,,"""""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,UserType,,User-Agent,Swagger-Codegen/1.4.0.0/csharp,,,,,,,,,{84},{85}
2022-08-02T18:47:21.094202+00:00,18adff97-e789-46b9-be58-6bec8d46f203,Core Directory,UserManagement,Update StsRefreshTokenValidFrom Timestamp,Success,,,User,,e359fcbe-cb50-4731-9623-ff0c954f3248,admin1@contoso.com,207.x.x.x,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,StsRefreshTokensValidFrom,"[""2020-09-29T18:51:53Z""]","[""2022-08-02T18:47:21Z""]",Included Updated Properties,,"""StsRefreshTokensValidFrom""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,User-Agent,Swagger-Codegen/1.4.0.0/csharp,,,,,,,,,,,{84},{85}
2022-08-02T17:03:09.5661985+00:00,32e59d0c-5023-45d3-b666-a7bc8bcfa237,Core Directory,UserManagement,Set force change user password,Success,,,User,,e359fcbe-cb50-4731-9623-ff0c954f3248,admin1@contoso.com,207.x.x.x,,,,,User,,838fcaab-1fb3-40af-98c5-843467fddf67,johndoe@contoso.com,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,{84},{85}