-
There is information that is not logged or captured, such as “direct Dataverse GET Web API requests to retrieve records,” in Purview Audit audit logs, etc.
We would like to request the provision of means to fully collect or visualize all information on Dataverse Web API HTTP GET requests—including those executed directly via Postman or browsers, and including calls.
When Dataverse read auditing is enabled, Purview allows us to confirm that specific users or applications have accessed data within a table. However, the following detailed information is not logged:
Details of API requests
Paging behavior
Number of records returned
It has been confirmed that this behavior is by product design; however, the fact that such detailed information is not logged poses a potential obstacle for security and compliance teams that require complete visibility into all API calls.
You’re offline. This is a read only version of the page.
