{
  "info": {
    "_postman_id": "982fd851-6922-4f60-b111-c30f3227e748",
    "name": "Microsoft Graph Admin Admin.admin auditLogs.auditLogRoot API",
    "description": "Microsoft Graph API for managing administrative resources in Microsoft Entra ID.\nThis API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,\nsite lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,\nSharePoint settings, Copilot administration, directory administrative units, and admin consent policies.\n\nContact Support:\n Name: Microsoft Graph API Support",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-08-02T18:06:37.000Z",
    "updatedAt": "2026-08-02T18:06:37.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-982fd851-6922-4f60-b111-c30f3227e748"
  },
  "item": [
    {
      "name": "auditLogs",
      "item": [
        {
          "name": "Microsoft Graph Get auditLogs",
          "id": "64dd8871-8721-4b28-a69e-84425678b131",
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          },
          "request": {
            "method": "GET",
            "header": [
              {
                "key": "Accept",
                "value": "application/json"
              }
            ],
            "url": {
              "raw": "{{baseUrl}}/auditLogs?$select=<string>,<string>&$expand=<string>,<string>",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "auditLogs"
              ],
              "query": [
                {
                  "description": "Select properties to be returned",
                  "key": "$select",
                  "value": "<string>,<string>"
                },
                {
                  "description": "Expand related entities",
                  "key": "$expand",
                  "value": "<string>,<string>"
                }
              ]
            }
          },
          "response": [
            {
              "id": "7a979d7f-7d0c-486f-b85e-6e7e4d725c6e",
              "name": "Retrieved entity",
              "originalRequest": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/auditLogs?$select=<string>,<string>&$expand=<string>,<string>",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "auditLogs"
                  ],
                  "query": [
                    {
                      "description": "Select properties to be returned",
                      "key": "$select",
                      "value": "<string>,<string>"
                    },
                    {
                      "description": "Expand related entities",
                      "key": "$expand",
                      "value": "<string>,<string>"
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"@odata.type\": \"<string>\",\n  \"id\": \"<string>\",\n  \"directoryAudits\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"13206879-12-19T16:48:32+34:72\",\n      \"activityDisplayName\": \"<string>\",\n      \"additionalDetails\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"key\": \"<string>\",\n          \"value\": \"<string>\"\n        }\n      ],\n      \"category\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"app\": {\n          \"@odata.type\": \"<string>\",\n          \"appId\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"servicePrincipalId\": \"<string>\",\n          \"servicePrincipalName\": \"<string>\"\n        },\n        \"user\": {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"id\": \"<string>\",\n          \"ipAddress\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      },\n      \"loggedByService\": \"<string>\",\n      \"operationType\": \"<string>\",\n      \"result\": \"timeout\",\n      \"resultReason\": \"<string>\",\n      \"targetResources\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"groupType\": \"azureAD\",\n          \"id\": \"<string>\",\n          \"modifiedProperties\": [\n            {\n              \"@odata.type\": \"<string>\",\n              \"displayName\": \"<string>\",\n              \"newValue\": \"<string>\",\n              \"oldValue\": \"<string>\"\n            }\n          ],\n          \"type\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      ]\n    }\n  ],\n  \"provisioning\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"7788494900-12-07T22:03:42Z\",\n      \"changeId\": \"<string>\",\n      \"cycleId\": \"<string>\",\n      \"durationInMilliseconds\": \"<number>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"initiatorType\": \"user\"\n      },\n      \"jobId\": \"<string>\",\n      \"modifiedProperties\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"newValue\": \"<string>\",\n          \"oldValue\": \"<string>\"\n        }\n      ],\n      \"provisioningAction\": \"disable\",\n      \"provisioningStatusInfo\": {\n        \"@odata.type\": \"<string>\",\n        \"errorInformation\": {\n          \"@odata.type\": \"<string>\",\n          \"additionalDetails\": \"<string>\",\n          \"errorCategory\": \"unknownFutureValue\",\n          \"errorCode\": \"<string>\",\n          \"reason\": \"<string>\",\n          \"recommendedAction\": \"<string>\"\n        },\n        \"status\": \"unknownFutureValue\"\n      },\n      \"provisioningSteps\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"description\": \"<string>\",\n          \"details\": {\n            \"@odata.type\": \"<string>\"\n          },\n          \"name\": \"<string>\",\n          \"provisioningStepType\": \"processing\",\n          \"status\": \"success\"\n        }\n      ],\n      \"servicePrincipal\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\"\n      },\n      \"sourceIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"sourceSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"targetIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"targetSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"signIns\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"appDisplayName\": \"<string>\",\n      \"appId\": \"<string>\",\n      \"appliedConditionalAccessPolicies\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"enforcedGrantControls\": [\n            \"<string>\"\n          ],\n          \"enforcedSessionControls\": [\n            \"<string>\"\n          ],\n          \"id\": \"<string>\",\n          \"result\": \"reportOnlySuccess\"\n        }\n      ],\n      \"clientAppUsed\": \"<string>\",\n      \"conditionalAccessStatus\": \"notApplied\",\n      \"correlationId\": \"<string>\",\n      \"createdDateTime\": \"626109-12-31T07:43:48.7058+65:75\",\n      \"deviceDetail\": {\n        \"@odata.type\": \"<string>\",\n        \"browser\": \"<string>\",\n        \"deviceId\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"isCompliant\": \"<boolean>\",\n        \"isManaged\": \"<boolean>\",\n        \"operatingSystem\": \"<string>\",\n        \"trustType\": \"<string>\"\n      },\n      \"ipAddress\": \"<string>\",\n      \"isInteractive\": \"<boolean>\",\n      \"location\": {\n        \"@odata.type\": \"<string>\",\n        \"city\": \"<string>\",\n        \"countryOrRegion\": \"<string>\",\n        \"geoCoordinates\": {\n          \"@odata.type\": \"<string>\",\n          \"altitude\": \"<double>\",\n          \"latitude\": \"<double>\",\n          \"longitude\": \"<double>\"\n        },\n        \"state\": \"<string>\"\n      },\n      \"resourceDisplayName\": \"<string>\",\n      \"resourceId\": \"<string>\",\n      \"riskDetail\": \"userPassedMFADrivenByRiskBasedPolicy\",\n      \"riskEventTypes\": [\n        \"adminConfirmedUserCompromised\"\n      ],\n      \"riskEventTypes_v2\": [\n        \"<string>\"\n      ],\n      \"riskLevelAggregated\": \"high\",\n      \"riskLevelDuringSignIn\": \"none\",\n      \"riskState\": \"remediated\",\n      \"status\": {\n        \"@odata.type\": \"<string>\",\n        \"additionalDetails\": \"<string>\",\n        \"errorCode\": \"<number>\",\n        \"failureReason\": \"<string>\"\n      },\n      \"userDisplayName\": \"<string>\",\n      \"userId\": \"<string>\",\n      \"userPrincipalName\": \"<string>\"\n    }\n  ]\n}",
              "createdAt": "2026-08-02T18:06:37.000Z",
              "updatedAt": "2026-08-02T18:06:37.000Z",
              "uid": "35240-7a979d7f-7d0c-486f-b85e-6e7e4d725c6e"
            },
            {
              "id": "b30fd15f-32e8-470a-b0c5-ca478b480d80",
              "name": "error",
              "originalRequest": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/auditLogs?$select=<string>,<string>&$expand=<string>,<string>",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "auditLogs"
                  ],
                  "query": [
                    {
                      "description": "Select properties to be returned",
                      "key": "$select",
                      "value": "<string>,<string>"
                    },
                    {
                      "description": "Expand related entities",
                      "key": "$expand",
                      "value": "<string>,<string>"
                    }
                  ]
                }
              },
              "status": "Bad Request",
              "code": 400,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"error\": {\n    \"code\": \"<string>\",\n    \"message\": \"<string>\",\n    \"target\": \"<string>\",\n    \"details\": [\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      },\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      }\n    ],\n    \"innerError\": {\n      \"@odata.type\": \"<string>\",\n      \"request-id\": \"<string>\",\n      \"client-request-id\": \"<string>\",\n      \"date\": \"277673-03-31T21:44:31Z\"\n    }\n  }\n}",
              "createdAt": "2026-08-02T18:06:37.000Z",
              "updatedAt": "2026-08-02T18:06:37.000Z",
              "uid": "35240-b30fd15f-32e8-470a-b0c5-ca478b480d80"
            },
            {
              "id": "7c5ff0fa-fba7-46a9-912e-55697e979438",
              "name": "error",
              "originalRequest": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/auditLogs?$select=<string>,<string>&$expand=<string>,<string>",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "auditLogs"
                  ],
                  "query": [
                    {
                      "description": "Select properties to be returned",
                      "key": "$select",
                      "value": "<string>,<string>"
                    },
                    {
                      "description": "Expand related entities",
                      "key": "$expand",
                      "value": "<string>,<string>"
                    }
                  ]
                }
              },
              "status": "Internal Server Error",
              "code": 500,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"error\": {\n    \"code\": \"<string>\",\n    \"message\": \"<string>\",\n    \"target\": \"<string>\",\n    \"details\": [\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      },\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      }\n    ],\n    \"innerError\": {\n      \"@odata.type\": \"<string>\",\n      \"request-id\": \"<string>\",\n      \"client-request-id\": \"<string>\",\n      \"date\": \"277673-03-31T21:44:31Z\"\n    }\n  }\n}",
              "createdAt": "2026-08-02T18:06:37.000Z",
              "updatedAt": "2026-08-02T18:06:37.000Z",
              "uid": "35240-7c5ff0fa-fba7-46a9-912e-55697e979438"
            }
          ],
          "createdAt": "2026-08-02T18:06:37.000Z",
          "updatedAt": "2026-08-02T18:06:37.000Z",
          "uid": "35240-64dd8871-8721-4b28-a69e-84425678b131"
        },
        {
          "name": "Microsoft Graph Update auditLogs",
          "id": "ea66803d-c41b-4999-a615-0b4d255c7880",
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          },
          "request": {
            "method": "PATCH",
            "header": [
              {
                "key": "Content-Type",
                "value": "application/json"
              },
              {
                "key": "Accept",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"@odata.type\": \"<string>\",\n  \"id\": \"<string>\",\n  \"directoryAudits\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"13206879-12-19T16:48:32+34:72\",\n      \"activityDisplayName\": \"<string>\",\n      \"additionalDetails\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"key\": \"<string>\",\n          \"value\": \"<string>\"\n        }\n      ],\n      \"category\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"app\": {\n          \"@odata.type\": \"<string>\",\n          \"appId\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"servicePrincipalId\": \"<string>\",\n          \"servicePrincipalName\": \"<string>\"\n        },\n        \"user\": {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"id\": \"<string>\",\n          \"ipAddress\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      },\n      \"loggedByService\": \"<string>\",\n      \"operationType\": \"<string>\",\n      \"result\": \"timeout\",\n      \"resultReason\": \"<string>\",\n      \"targetResources\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"groupType\": \"azureAD\",\n          \"id\": \"<string>\",\n          \"modifiedProperties\": [\n            {\n              \"@odata.type\": \"<string>\",\n              \"displayName\": \"<string>\",\n              \"newValue\": \"<string>\",\n              \"oldValue\": \"<string>\"\n            }\n          ],\n          \"type\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      ]\n    }\n  ],\n  \"provisioning\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"7788494900-12-07T22:03:42Z\",\n      \"changeId\": \"<string>\",\n      \"cycleId\": \"<string>\",\n      \"durationInMilliseconds\": \"<number>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"initiatorType\": \"user\"\n      },\n      \"jobId\": \"<string>\",\n      \"modifiedProperties\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"newValue\": \"<string>\",\n          \"oldValue\": \"<string>\"\n        }\n      ],\n      \"provisioningAction\": \"disable\",\n      \"provisioningStatusInfo\": {\n        \"@odata.type\": \"<string>\",\n        \"errorInformation\": {\n          \"@odata.type\": \"<string>\",\n          \"additionalDetails\": \"<string>\",\n          \"errorCategory\": \"unknownFutureValue\",\n          \"errorCode\": \"<string>\",\n          \"reason\": \"<string>\",\n          \"recommendedAction\": \"<string>\"\n        },\n        \"status\": \"unknownFutureValue\"\n      },\n      \"provisioningSteps\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"description\": \"<string>\",\n          \"details\": {\n            \"@odata.type\": \"<string>\"\n          },\n          \"name\": \"<string>\",\n          \"provisioningStepType\": \"processing\",\n          \"status\": \"success\"\n        }\n      ],\n      \"servicePrincipal\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\"\n      },\n      \"sourceIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"sourceSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"targetIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"targetSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"signIns\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"appDisplayName\": \"<string>\",\n      \"appId\": \"<string>\",\n      \"appliedConditionalAccessPolicies\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"enforcedGrantControls\": [\n            \"<string>\"\n          ],\n          \"enforcedSessionControls\": [\n            \"<string>\"\n          ],\n          \"id\": \"<string>\",\n          \"result\": \"reportOnlySuccess\"\n        }\n      ],\n      \"clientAppUsed\": \"<string>\",\n      \"conditionalAccessStatus\": \"notApplied\",\n      \"correlationId\": \"<string>\",\n      \"createdDateTime\": \"626109-12-31T07:43:48.7058+65:75\",\n      \"deviceDetail\": {\n        \"@odata.type\": \"<string>\",\n        \"browser\": \"<string>\",\n        \"deviceId\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"isCompliant\": \"<boolean>\",\n        \"isManaged\": \"<boolean>\",\n        \"operatingSystem\": \"<string>\",\n        \"trustType\": \"<string>\"\n      },\n      \"ipAddress\": \"<string>\",\n      \"isInteractive\": \"<boolean>\",\n      \"location\": {\n        \"@odata.type\": \"<string>\",\n        \"city\": \"<string>\",\n        \"countryOrRegion\": \"<string>\",\n        \"geoCoordinates\": {\n          \"@odata.type\": \"<string>\",\n          \"altitude\": \"<double>\",\n          \"latitude\": \"<double>\",\n          \"longitude\": \"<double>\"\n        },\n        \"state\": \"<string>\"\n      },\n      \"resourceDisplayName\": \"<string>\",\n      \"resourceId\": \"<string>\",\n      \"riskDetail\": \"userPassedMFADrivenByRiskBasedPolicy\",\n      \"riskEventTypes\": [\n        \"adminConfirmedUserCompromised\"\n      ],\n      \"riskEventTypes_v2\": [\n        \"<string>\"\n      ],\n      \"riskLevelAggregated\": \"high\",\n      \"riskLevelDuringSignIn\": \"none\",\n      \"riskState\": \"remediated\",\n      \"status\": {\n        \"@odata.type\": \"<string>\",\n        \"additionalDetails\": \"<string>\",\n        \"errorCode\": \"<number>\",\n        \"failureReason\": \"<string>\"\n      },\n      \"userDisplayName\": \"<string>\",\n      \"userId\": \"<string>\",\n      \"userPrincipalName\": \"<string>\"\n    }\n  ]\n}",
              "options": {
                "raw": {
                  "headerFamily": "json",
                  "language": "json"
                }
              }
            },
            "url": {
              "raw": "{{baseUrl}}/auditLogs",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "auditLogs"
              ]
            }
          },
          "response": [
            {
              "id": "984714f2-fa46-4fee-9fb0-178aaf737c73",
              "name": "Success",
              "originalRequest": {
                "method": "PATCH",
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"@odata.type\": \"<string>\",\n  \"id\": \"<string>\",\n  \"directoryAudits\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"13206879-12-19T16:48:32+34:72\",\n      \"activityDisplayName\": \"<string>\",\n      \"additionalDetails\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"key\": \"<string>\",\n          \"value\": \"<string>\"\n        }\n      ],\n      \"category\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"app\": {\n          \"@odata.type\": \"<string>\",\n          \"appId\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"servicePrincipalId\": \"<string>\",\n          \"servicePrincipalName\": \"<string>\"\n        },\n        \"user\": {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"id\": \"<string>\",\n          \"ipAddress\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      },\n      \"loggedByService\": \"<string>\",\n      \"operationType\": \"<string>\",\n      \"result\": \"timeout\",\n      \"resultReason\": \"<string>\",\n      \"targetResources\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"groupType\": \"azureAD\",\n          \"id\": \"<string>\",\n          \"modifiedProperties\": [\n            {\n              \"@odata.type\": \"<string>\",\n              \"displayName\": \"<string>\",\n              \"newValue\": \"<string>\",\n              \"oldValue\": \"<string>\"\n            }\n          ],\n          \"type\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      ]\n    }\n  ],\n  \"provisioning\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"7788494900-12-07T22:03:42Z\",\n      \"changeId\": \"<string>\",\n      \"cycleId\": \"<string>\",\n      \"durationInMilliseconds\": \"<number>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"initiatorType\": \"user\"\n      },\n      \"jobId\": \"<string>\",\n      \"modifiedProperties\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"newValue\": \"<string>\",\n          \"oldValue\": \"<string>\"\n        }\n      ],\n      \"provisioningAction\": \"disable\",\n      \"provisioningStatusInfo\": {\n        \"@odata.type\": \"<string>\",\n        \"errorInformation\": {\n          \"@odata.type\": \"<string>\",\n          \"additionalDetails\": \"<string>\",\n          \"errorCategory\": \"unknownFutureValue\",\n          \"errorCode\": \"<string>\",\n          \"reason\": \"<string>\",\n          \"recommendedAction\": \"<string>\"\n        },\n        \"status\": \"unknownFutureValue\"\n      },\n      \"provisioningSteps\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"description\": \"<string>\",\n          \"details\": {\n            \"@odata.type\": \"<string>\"\n          },\n          \"name\": \"<string>\",\n          \"provisioningStepType\": \"processing\",\n          \"status\": \"success\"\n        }\n      ],\n      \"servicePrincipal\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\"\n      },\n      \"sourceIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"sourceSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"targetIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"targetSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"signIns\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"appDisplayName\": \"<string>\",\n      \"appId\": \"<string>\",\n      \"appliedConditionalAccessPolicies\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"enforcedGrantControls\": [\n            \"<string>\"\n          ],\n          \"enforcedSessionControls\": [\n            \"<string>\"\n          ],\n          \"id\": \"<string>\",\n          \"result\": \"reportOnlySuccess\"\n        }\n      ],\n      \"clientAppUsed\": \"<string>\",\n      \"conditionalAccessStatus\": \"notApplied\",\n      \"correlationId\": \"<string>\",\n      \"createdDateTime\": \"626109-12-31T07:43:48.7058+65:75\",\n      \"deviceDetail\": {\n        \"@odata.type\": \"<string>\",\n        \"browser\": \"<string>\",\n        \"deviceId\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"isCompliant\": \"<boolean>\",\n        \"isManaged\": \"<boolean>\",\n        \"operatingSystem\": \"<string>\",\n        \"trustType\": \"<string>\"\n      },\n      \"ipAddress\": \"<string>\",\n      \"isInteractive\": \"<boolean>\",\n      \"location\": {\n        \"@odata.type\": \"<string>\",\n        \"city\": \"<string>\",\n        \"countryOrRegion\": \"<string>\",\n        \"geoCoordinates\": {\n          \"@odata.type\": \"<string>\",\n          \"altitude\": \"<double>\",\n          \"latitude\": \"<double>\",\n          \"longitude\": \"<double>\"\n        },\n        \"state\": \"<string>\"\n      },\n      \"resourceDisplayName\": \"<string>\",\n      \"resourceId\": \"<string>\",\n      \"riskDetail\": \"userPassedMFADrivenByRiskBasedPolicy\",\n      \"riskEventTypes\": [\n        \"adminConfirmedUserCompromised\"\n      ],\n      \"riskEventTypes_v2\": [\n        \"<string>\"\n      ],\n      \"riskLevelAggregated\": \"high\",\n      \"riskLevelDuringSignIn\": \"none\",\n      \"riskState\": \"remediated\",\n      \"status\": {\n        \"@odata.type\": \"<string>\",\n        \"additionalDetails\": \"<string>\",\n        \"errorCode\": \"<number>\",\n        \"failureReason\": \"<string>\"\n      },\n      \"userDisplayName\": \"<string>\",\n      \"userId\": \"<string>\",\n      \"userPrincipalName\": \"<string>\"\n    }\n  ]\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/auditLogs",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "auditLogs"
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"@odata.type\": \"<string>\",\n  \"id\": \"<string>\",\n  \"directoryAudits\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"13206879-12-19T16:48:32+34:72\",\n      \"activityDisplayName\": \"<string>\",\n      \"additionalDetails\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"key\": \"<string>\",\n          \"value\": \"<string>\"\n        }\n      ],\n      \"category\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"app\": {\n          \"@odata.type\": \"<string>\",\n          \"appId\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"servicePrincipalId\": \"<string>\",\n          \"servicePrincipalName\": \"<string>\"\n        },\n        \"user\": {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"id\": \"<string>\",\n          \"ipAddress\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      },\n      \"loggedByService\": \"<string>\",\n      \"operationType\": \"<string>\",\n      \"result\": \"timeout\",\n      \"resultReason\": \"<string>\",\n      \"targetResources\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"groupType\": \"azureAD\",\n          \"id\": \"<string>\",\n          \"modifiedProperties\": [\n            {\n              \"@odata.type\": \"<string>\",\n              \"displayName\": \"<string>\",\n              \"newValue\": \"<string>\",\n              \"oldValue\": \"<string>\"\n            }\n          ],\n          \"type\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      ]\n    }\n  ],\n  \"provisioning\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"7788494900-12-07T22:03:42Z\",\n      \"changeId\": \"<string>\",\n      \"cycleId\": \"<string>\",\n      \"durationInMilliseconds\": \"<number>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"initiatorType\": \"user\"\n      },\n      \"jobId\": \"<string>\",\n      \"modifiedProperties\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"newValue\": \"<string>\",\n          \"oldValue\": \"<string>\"\n        }\n      ],\n      \"provisioningAction\": \"disable\",\n      \"provisioningStatusInfo\": {\n        \"@odata.type\": \"<string>\",\n        \"errorInformation\": {\n          \"@odata.type\": \"<string>\",\n          \"additionalDetails\": \"<string>\",\n          \"errorCategory\": \"unknownFutureValue\",\n          \"errorCode\": \"<string>\",\n          \"reason\": \"<string>\",\n          \"recommendedAction\": \"<string>\"\n        },\n        \"status\": \"unknownFutureValue\"\n      },\n      \"provisioningSteps\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"description\": \"<string>\",\n          \"details\": {\n            \"@odata.type\": \"<string>\"\n          },\n          \"name\": \"<string>\",\n          \"provisioningStepType\": \"processing\",\n          \"status\": \"success\"\n        }\n      ],\n      \"servicePrincipal\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\"\n      },\n      \"sourceIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"sourceSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"targetIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"targetSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"signIns\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"appDisplayName\": \"<string>\",\n      \"appId\": \"<string>\",\n      \"appliedConditionalAccessPolicies\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"enforcedGrantControls\": [\n            \"<string>\"\n          ],\n          \"enforcedSessionControls\": [\n            \"<string>\"\n          ],\n          \"id\": \"<string>\",\n          \"result\": \"reportOnlySuccess\"\n        }\n      ],\n      \"clientAppUsed\": \"<string>\",\n      \"conditionalAccessStatus\": \"notApplied\",\n      \"correlationId\": \"<string>\",\n      \"createdDateTime\": \"626109-12-31T07:43:48.7058+65:75\",\n      \"deviceDetail\": {\n        \"@odata.type\": \"<string>\",\n        \"browser\": \"<string>\",\n        \"deviceId\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"isCompliant\": \"<boolean>\",\n        \"isManaged\": \"<boolean>\",\n        \"operatingSystem\": \"<string>\",\n        \"trustType\": \"<string>\"\n      },\n      \"ipAddress\": \"<string>\",\n      \"isInteractive\": \"<boolean>\",\n      \"location\": {\n        \"@odata.type\": \"<string>\",\n        \"city\": \"<string>\",\n        \"countryOrRegion\": \"<string>\",\n        \"geoCoordinates\": {\n          \"@odata.type\": \"<string>\",\n          \"altitude\": \"<double>\",\n          \"latitude\": \"<double>\",\n          \"longitude\": \"<double>\"\n        },\n        \"state\": \"<string>\"\n      },\n      \"resourceDisplayName\": \"<string>\",\n      \"resourceId\": \"<string>\",\n      \"riskDetail\": \"userPassedMFADrivenByRiskBasedPolicy\",\n      \"riskEventTypes\": [\n        \"adminConfirmedUserCompromised\"\n      ],\n      \"riskEventTypes_v2\": [\n        \"<string>\"\n      ],\n      \"riskLevelAggregated\": \"high\",\n      \"riskLevelDuringSignIn\": \"none\",\n      \"riskState\": \"remediated\",\n      \"status\": {\n        \"@odata.type\": \"<string>\",\n        \"additionalDetails\": \"<string>\",\n        \"errorCode\": \"<number>\",\n        \"failureReason\": \"<string>\"\n      },\n      \"userDisplayName\": \"<string>\",\n      \"userId\": \"<string>\",\n      \"userPrincipalName\": \"<string>\"\n    }\n  ]\n}",
              "createdAt": "2026-08-02T18:06:37.000Z",
              "updatedAt": "2026-08-02T18:06:37.000Z",
              "uid": "35240-984714f2-fa46-4fee-9fb0-178aaf737c73"
            },
            {
              "id": "ea5a7fc8-c89e-4fb2-a46e-8b20d1336c44",
              "name": "error",
              "originalRequest": {
                "method": "PATCH",
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"@odata.type\": \"<string>\",\n  \"id\": \"<string>\",\n  \"directoryAudits\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"13206879-12-19T16:48:32+34:72\",\n      \"activityDisplayName\": \"<string>\",\n      \"additionalDetails\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"key\": \"<string>\",\n          \"value\": \"<string>\"\n        }\n      ],\n      \"category\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"app\": {\n          \"@odata.type\": \"<string>\",\n          \"appId\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"servicePrincipalId\": \"<string>\",\n          \"servicePrincipalName\": \"<string>\"\n        },\n        \"user\": {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"id\": \"<string>\",\n          \"ipAddress\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      },\n      \"loggedByService\": \"<string>\",\n      \"operationType\": \"<string>\",\n      \"result\": \"timeout\",\n      \"resultReason\": \"<string>\",\n      \"targetResources\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"groupType\": \"azureAD\",\n          \"id\": \"<string>\",\n          \"modifiedProperties\": [\n            {\n              \"@odata.type\": \"<string>\",\n              \"displayName\": \"<string>\",\n              \"newValue\": \"<string>\",\n              \"oldValue\": \"<string>\"\n            }\n          ],\n          \"type\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      ]\n    }\n  ],\n  \"provisioning\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"7788494900-12-07T22:03:42Z\",\n      \"changeId\": \"<string>\",\n      \"cycleId\": \"<string>\",\n      \"durationInMilliseconds\": \"<number>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"initiatorType\": \"user\"\n      },\n      \"jobId\": \"<string>\",\n      \"modifiedProperties\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"newValue\": \"<string>\",\n          \"oldValue\": \"<string>\"\n        }\n      ],\n      \"provisioningAction\": \"disable\",\n      \"provisioningStatusInfo\": {\n        \"@odata.type\": \"<string>\",\n        \"errorInformation\": {\n          \"@odata.type\": \"<string>\",\n          \"additionalDetails\": \"<string>\",\n          \"errorCategory\": \"unknownFutureValue\",\n          \"errorCode\": \"<string>\",\n          \"reason\": \"<string>\",\n          \"recommendedAction\": \"<string>\"\n        },\n        \"status\": \"unknownFutureValue\"\n      },\n      \"provisioningSteps\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"description\": \"<string>\",\n          \"details\": {\n            \"@odata.type\": \"<string>\"\n          },\n          \"name\": \"<string>\",\n          \"provisioningStepType\": \"processing\",\n          \"status\": \"success\"\n        }\n      ],\n      \"servicePrincipal\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\"\n      },\n      \"sourceIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"sourceSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"targetIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"targetSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"signIns\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"appDisplayName\": \"<string>\",\n      \"appId\": \"<string>\",\n      \"appliedConditionalAccessPolicies\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"enforcedGrantControls\": [\n            \"<string>\"\n          ],\n          \"enforcedSessionControls\": [\n            \"<string>\"\n          ],\n          \"id\": \"<string>\",\n          \"result\": \"reportOnlySuccess\"\n        }\n      ],\n      \"clientAppUsed\": \"<string>\",\n      \"conditionalAccessStatus\": \"notApplied\",\n      \"correlationId\": \"<string>\",\n      \"createdDateTime\": \"626109-12-31T07:43:48.7058+65:75\",\n      \"deviceDetail\": {\n        \"@odata.type\": \"<string>\",\n        \"browser\": \"<string>\",\n        \"deviceId\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"isCompliant\": \"<boolean>\",\n        \"isManaged\": \"<boolean>\",\n        \"operatingSystem\": \"<string>\",\n        \"trustType\": \"<string>\"\n      },\n      \"ipAddress\": \"<string>\",\n      \"isInteractive\": \"<boolean>\",\n      \"location\": {\n        \"@odata.type\": \"<string>\",\n        \"city\": \"<string>\",\n        \"countryOrRegion\": \"<string>\",\n        \"geoCoordinates\": {\n          \"@odata.type\": \"<string>\",\n          \"altitude\": \"<double>\",\n          \"latitude\": \"<double>\",\n          \"longitude\": \"<double>\"\n        },\n        \"state\": \"<string>\"\n      },\n      \"resourceDisplayName\": \"<string>\",\n      \"resourceId\": \"<string>\",\n      \"riskDetail\": \"userPassedMFADrivenByRiskBasedPolicy\",\n      \"riskEventTypes\": [\n        \"adminConfirmedUserCompromised\"\n      ],\n      \"riskEventTypes_v2\": [\n        \"<string>\"\n      ],\n      \"riskLevelAggregated\": \"high\",\n      \"riskLevelDuringSignIn\": \"none\",\n      \"riskState\": \"remediated\",\n      \"status\": {\n        \"@odata.type\": \"<string>\",\n        \"additionalDetails\": \"<string>\",\n        \"errorCode\": \"<number>\",\n        \"failureReason\": \"<string>\"\n      },\n      \"userDisplayName\": \"<string>\",\n      \"userId\": \"<string>\",\n      \"userPrincipalName\": \"<string>\"\n    }\n  ]\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/auditLogs",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "auditLogs"
                  ]
                }
              },
              "status": "Bad Request",
              "code": 400,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"error\": {\n    \"code\": \"<string>\",\n    \"message\": \"<string>\",\n    \"target\": \"<string>\",\n    \"details\": [\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      },\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      }\n    ],\n    \"innerError\": {\n      \"@odata.type\": \"<string>\",\n      \"request-id\": \"<string>\",\n      \"client-request-id\": \"<string>\",\n      \"date\": \"277673-03-31T21:44:31Z\"\n    }\n  }\n}",
              "createdAt": "2026-08-02T18:06:37.000Z",
              "updatedAt": "2026-08-02T18:06:37.000Z",
              "uid": "35240-ea5a7fc8-c89e-4fb2-a46e-8b20d1336c44"
            },
            {
              "id": "301f21ed-ecd9-4895-9bc0-0c14b70b1df2",
              "name": "error",
              "originalRequest": {
                "method": "PATCH",
                "header": [
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"@odata.type\": \"<string>\",\n  \"id\": \"<string>\",\n  \"directoryAudits\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"13206879-12-19T16:48:32+34:72\",\n      \"activityDisplayName\": \"<string>\",\n      \"additionalDetails\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"key\": \"<string>\",\n          \"value\": \"<string>\"\n        }\n      ],\n      \"category\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"app\": {\n          \"@odata.type\": \"<string>\",\n          \"appId\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"servicePrincipalId\": \"<string>\",\n          \"servicePrincipalName\": \"<string>\"\n        },\n        \"user\": {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"id\": \"<string>\",\n          \"ipAddress\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      },\n      \"loggedByService\": \"<string>\",\n      \"operationType\": \"<string>\",\n      \"result\": \"timeout\",\n      \"resultReason\": \"<string>\",\n      \"targetResources\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"groupType\": \"azureAD\",\n          \"id\": \"<string>\",\n          \"modifiedProperties\": [\n            {\n              \"@odata.type\": \"<string>\",\n              \"displayName\": \"<string>\",\n              \"newValue\": \"<string>\",\n              \"oldValue\": \"<string>\"\n            }\n          ],\n          \"type\": \"<string>\",\n          \"userPrincipalName\": \"<string>\"\n        }\n      ]\n    }\n  ],\n  \"provisioning\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"activityDateTime\": \"7788494900-12-07T22:03:42Z\",\n      \"changeId\": \"<string>\",\n      \"cycleId\": \"<string>\",\n      \"durationInMilliseconds\": \"<number>\",\n      \"initiatedBy\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"initiatorType\": \"user\"\n      },\n      \"jobId\": \"<string>\",\n      \"modifiedProperties\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"newValue\": \"<string>\",\n          \"oldValue\": \"<string>\"\n        }\n      ],\n      \"provisioningAction\": \"disable\",\n      \"provisioningStatusInfo\": {\n        \"@odata.type\": \"<string>\",\n        \"errorInformation\": {\n          \"@odata.type\": \"<string>\",\n          \"additionalDetails\": \"<string>\",\n          \"errorCategory\": \"unknownFutureValue\",\n          \"errorCode\": \"<string>\",\n          \"reason\": \"<string>\",\n          \"recommendedAction\": \"<string>\"\n        },\n        \"status\": \"unknownFutureValue\"\n      },\n      \"provisioningSteps\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"description\": \"<string>\",\n          \"details\": {\n            \"@odata.type\": \"<string>\"\n          },\n          \"name\": \"<string>\",\n          \"provisioningStepType\": \"processing\",\n          \"status\": \"success\"\n        }\n      ],\n      \"servicePrincipal\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\"\n      },\n      \"sourceIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"sourceSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"targetIdentity\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        },\n        \"identityType\": \"<string>\"\n      },\n      \"targetSystem\": {\n        \"@odata.type\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"id\": \"<string>\",\n        \"details\": {\n          \"@odata.type\": \"<string>\"\n        }\n      },\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"signIns\": [\n    {\n      \"@odata.type\": \"<string>\",\n      \"id\": \"<string>\",\n      \"appDisplayName\": \"<string>\",\n      \"appId\": \"<string>\",\n      \"appliedConditionalAccessPolicies\": [\n        {\n          \"@odata.type\": \"<string>\",\n          \"displayName\": \"<string>\",\n          \"enforcedGrantControls\": [\n            \"<string>\"\n          ],\n          \"enforcedSessionControls\": [\n            \"<string>\"\n          ],\n          \"id\": \"<string>\",\n          \"result\": \"reportOnlySuccess\"\n        }\n      ],\n      \"clientAppUsed\": \"<string>\",\n      \"conditionalAccessStatus\": \"notApplied\",\n      \"correlationId\": \"<string>\",\n      \"createdDateTime\": \"626109-12-31T07:43:48.7058+65:75\",\n      \"deviceDetail\": {\n        \"@odata.type\": \"<string>\",\n        \"browser\": \"<string>\",\n        \"deviceId\": \"<string>\",\n        \"displayName\": \"<string>\",\n        \"isCompliant\": \"<boolean>\",\n        \"isManaged\": \"<boolean>\",\n        \"operatingSystem\": \"<string>\",\n        \"trustType\": \"<string>\"\n      },\n      \"ipAddress\": \"<string>\",\n      \"isInteractive\": \"<boolean>\",\n      \"location\": {\n        \"@odata.type\": \"<string>\",\n        \"city\": \"<string>\",\n        \"countryOrRegion\": \"<string>\",\n        \"geoCoordinates\": {\n          \"@odata.type\": \"<string>\",\n          \"altitude\": \"<double>\",\n          \"latitude\": \"<double>\",\n          \"longitude\": \"<double>\"\n        },\n        \"state\": \"<string>\"\n      },\n      \"resourceDisplayName\": \"<string>\",\n      \"resourceId\": \"<string>\",\n      \"riskDetail\": \"userPassedMFADrivenByRiskBasedPolicy\",\n      \"riskEventTypes\": [\n        \"adminConfirmedUserCompromised\"\n      ],\n      \"riskEventTypes_v2\": [\n        \"<string>\"\n      ],\n      \"riskLevelAggregated\": \"high\",\n      \"riskLevelDuringSignIn\": \"none\",\n      \"riskState\": \"remediated\",\n      \"status\": {\n        \"@odata.type\": \"<string>\",\n        \"additionalDetails\": \"<string>\",\n        \"errorCode\": \"<number>\",\n        \"failureReason\": \"<string>\"\n      },\n      \"userDisplayName\": \"<string>\",\n      \"userId\": \"<string>\",\n      \"userPrincipalName\": \"<string>\"\n    }\n  ]\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/auditLogs",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "auditLogs"
                  ]
                }
              },
              "status": "Internal Server Error",
              "code": 500,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"error\": {\n    \"code\": \"<string>\",\n    \"message\": \"<string>\",\n    \"target\": \"<string>\",\n    \"details\": [\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      },\n      {\n        \"code\": \"<string>\",\n        \"message\": \"<string>\",\n        \"target\": \"<string>\"\n      }\n    ],\n    \"innerError\": {\n      \"@odata.type\": \"<string>\",\n      \"request-id\": \"<string>\",\n      \"client-request-id\": \"<string>\",\n      \"date\": \"277673-03-31T21:44:31Z\"\n    }\n  }\n}",
              "createdAt": "2026-08-02T18:06:37.000Z",
              "updatedAt": "2026-08-02T18:06:37.000Z",
              "uid": "35240-301f21ed-ecd9-4895-9bc0-0c14b70b1df2"
            }
          ],
          "createdAt": "2026-08-02T18:06:37.000Z",
          "updatedAt": "2026-08-02T18:06:37.000Z",
          "uid": "35240-ea66803d-c41b-4999-a615-0b4d255c7880"
        }
      ],
      "id": "33431d38-f9c0-4342-9837-d3b250510f8f",
      "createdAt": "2026-08-02T18:06:37.000Z",
      "updatedAt": "2026-08-02T18:06:37.000Z",
      "uid": "35240-33431d38-f9c0-4342-9837-d3b250510f8f"
    }
  ],
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://graph.microsoft.com/v1.0"
    }
  ]
}