A team needs to audit which role assignments have been made in a subscription over the last 30 days. Where would you find this information?
- A Azure Active Directory audit logs
- B Azure Monitor Activity Log (category: Administrative, operation: Microsoft.Authorization/roleAssignments/write) (correct answer)
- C Key Vault audit events
- D Log Analytics custom tables
Shortcut: Authorization/roleAssignments/write operations. Query AzureActivity table in Log Analytics or view in the portal Activity Log.
Role assignment changes appear in the Azure Activity Log as Microsoft.Authorization/roleAssignments/write operations. Query AzureActivity table in Log Analytics or view in the portal Activity Log.