Auditing
Auditing in Business Central covers how to track data changes, audit security-related tables, and review events sent to Microsoft Purview. It answers questions about who changed what and when, which tools to use, and which administrative events are logged.
Path: Security, privacy, and compliance > Auditing · tier official · system none · narrative reviewed (checked by Opus)
Overview
Auditing in Business Central helps administrators track changes, review user permissions, and support data governance. The section starts with an overview page that introduces change log tracking, permission review, security auditing, data classification, and Microsoft Purview integration.
Two pages cover auditing inside the product. “Auditing changes” describes the change log, field monitoring, data analysis, sensitive field monitoring, retention policies, and activity logs. “Security auditing” focuses on changes to critical tables such as Access Control, Permission, User, and Change Log Setup entries, and shows how to use Data Analysis on the Change Log Entries page.
A fourth page documents the events Business Central emits automatically to Microsoft Purview, grouped by area such as environment, extension, user, company, integration, and Copilot activities. Begin with the overview, then go to the change and security pages for in-product auditing, and to the Purview page for tenant-level audit events.
Key points
- The change log, field monitoring, and data analysis features show who changed what and when.
- Sensitive field monitoring, retention policies, and activity logs are part of auditing changes.
- Security auditing tracks changes to Access Control, Permission, User, and Change Log Setup entries.
- Data Analysis on the Change Log Entries page lets you analyze audit trail data interactively.
- Business Central emits auditable events automatically to Microsoft Purview.
- Purview events cover environment, extension, user, company, integration, Copilot, cloud migration, and reporting activities.
- The overview page also covers user permissions review and data classification.
Learn pages
- Auditing changes: Track changes to data in selected tables and monitor user activities with change logs and activity logs in Business Central.
- Auditing events in Microsoft Purview: Discover how Business Central automatically emits Create, Update, and Delete events to Microsoft Purview auditing solutions.
- Business Central Auditing Overview: Learn about Business Central auditing for reviewing permissions, tracking data changes, and analyzing change logs, plus related data classification guidance.
- Security auditing in Business Central: Learn about the built-in capabilities in Business Central that let you track and audit usage of your Business Central.
Business Central pages and reports
The pages, reports and queries this hub’s Learn pages name (ms.search.form, API reference), joined to the code by exact object id (data/index/docs-objects.json); a page shows the table it runs on.
- Page 592 “Change Log Setup” · on Table 402 “Change Log Setup”
- Page 593 “Change Log Setup (Table) List”
- Page 594 “Change Log Setup (Field) List”
- Page 595 “Change Log Entries” · on Table 405 “Change Log Entry”
- Page 710 “Activity Log” · on Table 710 “Activity Log”
- Page 1366 “Field Monitoring Setup” · on Table 1366 “Field Monitoring Setup”
- Page 1367 “Monitored Field Log Entries” · on Table 405 “Change Log Entry”
- Page 1368 “Monitor Field Setup Wizard” · captioned “Field Monitoring Assisted Setup Guide”
- Page 1369 “Monitored Fields Worksheet” · on Table 404 “Change Log Setup (Field)”
Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn’s own.