Commands › Exchange Online

Set-AuditConfig

Exchange Online ExchangeOnlineManagement Set-*

For more information, see Security & Compliance PowerShell. Use the Set-AuditConfig cmdlet to configure the auditing configuration in the Microsoft Purview compliance portal.

Quick start script

# Set-AuditConfig — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-AuditConfig
$before | Format-List

# 3. Make the change
Set-AuditConfig -Workload <MultiValuedProperty>

# 4. Verify and diff
$after = Get-AuditConfig
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Set-AuditConfig [[-Identity] <PolicyIdParameter>] -Workload <MultiValuedProperty>
 [-DomainController <Fqdn>]
 [-Organization <OrganizationIdParameter>]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	Required	What it controls
-Identity	PolicyIdParameter		This parameter is reserved for internal Microsoft use.
-Workload	MultiValuedProperty	yes	The Workload parameter specifies where auditing is allowed. Valid values are:
-DomainController	Fqdn		This parameter is reserved for internal Microsoft use.
-Organization	OrganizationIdParameter		This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.