Audit

The /Organizations/{organizationId}/AuditItems resource collection allows you to manage audit items. Veeam Backup for Microsoft 365 tracks access to backed-up data of a specific user or group and sends audit email notifications for each operation performed with the backed-up data of a specific user or group.

For more information, see the Veeam Backup for Microsoft 365 REST API Reference, section Backed-Up Data Audit.

Get Audit Items

Returns a list of audit items, that is, a list of users and groups for which Veeam Backup for Microsoft 365 sends audit notifications.

SecurityBearer
Request
path Parameters
organizationId
required
string <uuid>

Specifies the identification number of the Microsoft 365 organization. For more information on how to get this parameter, see Get Organizations.

Responses
200

OK

default

Operation failure response.

get/v8/Organizations/{organizationId}/AuditItems
Request samples
Response samples
application/json
[
  • {
    }
]

Add Audit Item

Adds an audit item. Veeam Backup for Microsoft 365 will send audit notifications for operations performed by the specified user or users of the specified group.

x-codegen-request-body-name: items
SecurityBearer
Request
path Parameters
organizationId
required
string <uuid>

Specifies the identification number of the Microsoft 365 organization. For more information on how to get this parameter, see Get Organizations.

Request Body schema: application/json
required
Array
id
string

ID of the audit item.

type
string

Type of the audit item.

Enum: "User" "Group"
object (RESTGroup)
object (RESTUser)
object (RESTLinkHALDictionary)

Related resources.

Responses
204

No Content

default

Operation failure response.

post/v8/Organizations/{organizationId}/AuditItems
Request samples
application/json
[
  • {
    }
]
Response samples
application/json
{
  • "message": "string",
  • "errorCode": "ProxyOffline",
  • "stackTrace": "string"
}

Remove Audit Items

Removes audit items from a list of users and groups for which Veeam Backup for Microsoft 365 sends audit notifications.

x-codegen-request-body-name: action
SecurityBearer
Request
path Parameters
organizationId
required
string <uuid>

Specifies the identification number of the Microsoft 365 organization. For more information on how to get this parameter, see Get Organizations.

Request Body schema: application/json
required
itemIds
Array of strings

Specifies IDs of the audit items that you want to remove. For more information on how to get such IDs, see Get Audit Items.

Responses
204

No Content

default

Operation failure response.

post/v8/Organizations/{organizationId}/AuditItems/remove
Request samples
application/json
{
  • "itemIds": [
    ]
}
Response samples
application/json
{
  • "message": "string",
  • "errorCode": "ProxyOffline",
  • "stackTrace": "string"
}

Document updated 12/18/2025

Page content applies to build 8.3.0.2201