Page Comparison

TABLE

Office365ExchangeAdmin

RECORDTYPE

RecordType is “1”, more details about RecordType here.

APPID

AppId - No available documentation for this field.

CLIENTAPPID

ClientAppId - No available documentation for this field.

MODOBJECTRESOLVENAME

ModifiedObjectResolvedName - This is the user friendly name of the object that was modified by the cmdlet.
This is logged only if the cmdlet modifies the object.

MODIFIEDPROPERTIES

ModifiedProperties - The property is included for admin events.
The property includes the name of the property that was modified, the new value of the modified property, and the previous value of the modified object.

PARAMS

Parameters - The name and value for all parameters that were used with the cmdlet that is identified in the Operations property.

EXTERNALACCESS

ExternalAccess - Specifies whether the cmdlet was run by a user in your organization, by Microsoft datacenter personnel or a datacenter service account, or by a delegated administrator.
The value False indicates that the cmdlet was run by someone in your organization.
The value True indicates that the cmdlet was run by datacenter personnel, a datacenter service account, or a delegated administrator.

ORIGINATINGSERVER

OriginatingServer - The name of the server from which the cmdlet was executed.

ORGNAME

OrganizationName - The name of the tenant.

SNAREDATAMAP

All unclassified field/s in the log will be pushed into the SNAREDATAMAP.