1. Home
  2. Radar Reporting
  3. Security
  4. What Office 365 data and attributes do you collect and store?

What Office 365 data and attributes do you collect and store?

The following article outlines the current data types collected from Office 365 by Quadrotech for the purpose of building and presenting tenant and user reports for its Office 365 reporting package known as ‘Radar Reporting’. Please note that items marked with * require additional authority from the customer and are not collected by default.

Please note that only customers who have signed up before 30th September 2015 will have SharePoint Online and OneDrive For Business data collected, and then only until the end of their subscription.

Please note that this may vary over time and may not be limited to the data points outlined below. This document is updated when new products and reports are released.

 

Azure Tenant Type Objects

Office 365 Version
Accepted Domains
AzureCompany Information

Name

            Street

            City

            State

            PostalCode

            Technical Notification Email Address

            Marketing Notification Email Address

PreferredLanguage
CountryLetterCode
DirSync Enabled
Last DirSync Time
Password Sync Enabled
Last Password Sync
ReleaseTrack
Sku
Message Rules
Schema Extensions
Administrative Units
DNS Records

 

Azure AD User Object

UserPrincipalName
DisplayName
FirstName
LastName
Title
Department
Office
StreetAddress
City
State
PostalCode
PhoneNumber *
MobilePhone *
Fax *
PreferredLanguage
PasswordNeverExpires
StrongPasswordRequired
IsBlackberryUser
Licenses
Subscriptions
IsLicensed
UsageLocation
LastDirSyncTime
LastPasswordChangeTimestamp

User Activity

ExchangeLastActivity
OneDriveLastActivity
SkypeLastActivity
YammerLastActivity
SharePointLastActivity
TeamsLastActivity
ExchangeLicenseAssignDate
OneDriveLicenseAssignDate
SharePointLicenseAssignDate
SkypeForBusinessLicenseAssignDate
YammerLicenseAssignDate
TeamsLicenseAssignDate

 

Azure AD Group Object

GroupType
DisplayName
DirSyncProvisioningErrors
EmailAddress
LastDirSyncTime
ManagedBy
ObjectId
ProxyAddresses
ValidationStatus
Description

 

Exchange Online Mailbox Statistics
Message count by tenant
Message count by user
Connection type by user
Connection type by tenant
Skype for Business statistics (Connection count by tenant)

 

Exchange Online User & Mailbox Object

ExternalDirectoryObjectId
Identity
Guid
Name
DisplayName
WhenCreated
RecipientTypeDetails
FirstName
LastName
Title
Company
Department
Office
City
StateOrProvince
CountryOrRegion
PostalCode
RecipientType
WindowsLiveID
PrimarySMTPAddress
SamAccountName
UserPrincipalName
ForwardingSmtpAddress
WhenMailboxCreated
EmailAddresses
PrimarySmtpAddress
RetentionPolicy
ArchiveGuid
ArchiveQuota
ArchiveWarningQuota
ArchiveSize
ArchiveItemCount
Alias
IsMailboxEnabled
ExchangeGuid
ProhibitSendQuota
ProhibitSendReceiveQuota
RecoverableItemsWarningQuota
IssueWarningQuota
LitigationHoldEnabled
LitigationHoldDate
LitigationHoldOwner
LitigationHoldDuration
WhenChanged
ItemCount
DeletedItemCount
TotalDeletedItemSize
TotalItemSize
StorageLimitStatus
MailboxPermissions (Identity)
MailboxPermissions (User)
MailboxPermissions (IsInherited)
MailboxPermissions (Deny)
MailboxPermissions (AccessRights)
ActiveSyncEnabled
OWAEnabled
POPEnabled
IMAPEnabled
MAPIEnabled
EWSEnabled
OWAMailboxPolicy
ActiveSyncMailboxPolicy
MAPIBlockOutlookRpcHttp
MAPIBlockOutlookVersions
MAPIBlockOutlookNonCachedMode
EwsAllowMacOutlook
EwsAllowOutlook
EwsAllowEntourage
WhenSoftDeleted
IsSoftDeletedByRemove
IsSoftDeletedByDisable
ExchangeUserAccountControl
ExchangeVersion
AdminDisplayVersion
UserAccountControl
AccountDisabled
Out-of-Office status

 

Exchange Online Message Statistics

Message Date
Message Count
Message Size
Sender (Internal Only)
Recipient (Internal Only)

 

Office 365 Groups

DisplayName
Activity Date
GroupType
Internal/External Member Count
Office 365 Group Activity Counts

 

Exchange Online Distribution List & Members Objects

Guid
Identity
WhenChanged
GroupType
SamAccountName
ManagedBy
MemberJoinRestriction
MemberDepartRestriction
ReportToManagerEnabled
ReportToOriginatorEnabled
SendOofMessageToOriginatorEnabled
AcceptMessagesOnlyFrom
AcceptMessagesOnlyFromDLMembers
AddressListMembership
DisplayName
EmailAddresses
GrantSendOnBehalfTo
ExternalDirectoryObjectId
HiddenFromAddressListsEnabled
MaxSendSize
MaxReceiveSize
ModeratedBy
ModerationEnabled
PrimarySmtpAddress
RecipientType
RejectMessagesFrom
RejectMessagesFromDLMembers
RequireSenderAuthenticationEnabled
MailTip
Member (Guid)
Member (Identity)
Member (RecipientType)

 

Exchange Online Dynamic Distribution List Objects

IncludedRecipients
ConditionalDepartment
ConditionalCompany
ConditionalStateOrProvince
ConditionalCustomAttribute1 – 15
RecipientFilterType
Guid
WhenChanged
Identity
ManagedBy
ReportToManagerEnabled
ReportToOriginatorEnabled
SendOofMessageToOriginatorEnabled
AcceptMessagesOnlyFrom
AcceptMessagesOnlyFromDLMembers
AddressListMembership,DisplayName
EmailAddresses
GrantSendOnBehalfTo
HiddenFromAddressListsEnabled
MaxSendSize
MaxReceiveSize
ModeratedBy
ModerationEnabled
PrimarySmtpAddress
RecipientType
RejectMessagesFrom
RejectMessagesFromDLMembers
RequireSenderAuthenticationEnabled
SendModerationNotifications
MailTip

 

Exchange Online Mobile Device Objects

Guid

Identity
FriendlyName
DeviceId
DeviceOS
DeviceOSLanguage,
DeviceType
DeviceUserAgent
DeviceModel
DeviceAccessState
DeviceAccessStateReason
FirstSyncTime
WhenChanged
WhenCreated
IsRemoteWipeSupported
Status
LastPolicyUpdateTime
LastSyncAttemptTime
LastSuccessSync
DevicePolicyApplied
DevicePolicyApplicationStatus
NumberOfFoldersSynced

 

Skype for Business

UserName

lastActivityTime
TotalP2PSessions
TotalP2PIMSessions
TotalP2PAudioSessions
TotalP2PVideoSessions
TotalP2PApplicationSharingSessions
TotalP2PAudioSessionMinutes
TotalP2PVideoSessionMinutes
TotalOrganizedConferences
TotalOrganizedIMConferences
TotalOrganizedAVConferences
TotalOrganizedApplicationSharingConferences
TotalOrganizedWebConferences
TotalOrganizedDialinConferences
TotalOrganizedAVConferenceMinutes
TotalParticipatedConferences
TotalParticipatedIMConferences
TotalParticipatedAVConferences
TotalParticipatedApplicationSharingConferences
TotalParticipatedWebConferences
TotalParticipatedDialinConferences
TotalParticipatedAVConferenceMinutes
TotalMessages
TotalTransferedFiles

 

User Client/Browser Objects

Username
Browser Name
Browser Version
Client OS Name
Client OS Version
Days Used
Last Accessed Date

 

Tenant Service Status Objects

Incident Event Id
Incident Event Type
Incident Last Update
Incident Start Date
Incident End Date
Incident Status
Incident Title
Incident Affected Service
Incident Service Status Messages
Message Centre Event Id
Message Centre Event Last Updated
Message Centre Event Start Date
Message Centre Event Status
Message Centre Event Title
Message Centre Event Action Required by Date
Message Centre Event Action Type
Message Centre Event Category
Message Centre Event External Link
Message Centre Event Urgency Level
Message Centre Event Messages

 

Office 365 Pro Plus

Number of Activations
Last Activation Date

 

Yammer

Number of Likes
Number of Read
Number of Posts
User State
Last Activity Date

Teams

Chat Message Count
Call Count
Meeting Count
Device usage

Active Directory On-Premises Objects *

Guid
ExternalDirectoryObjectId
Identity
UserPrincipalName
ForwardingAddress
ForwardingSmtpAddress
WhenMailboxCreated
PrimarySmtpAddress
RetentionPolicy
ArchiveGuid
Alias
IsMailboxEnabled
ExchangeGuid
ProhibitSendQuota
ProhibitSendReceiveQuota
RecoverableItemsQuota
RecoverableItemsWarningQuota
IssueWarningQuota
LitigationHoldEnabled
LitigationHoldDate
LitigationHoldOwner
LitigationHoldDuration
WhenChanged
ServerName
RoleAssignmentPolicy
CustomAttribute1
CustomAttribute2
CustomAttribute3
CustomAttribute4
CustomAttribute5
CustomAttribute6
CustomAttribute7
CustomAttribute8
CustomAttribute9
CustomAttribute10
CustomAttribute11
CustomAttribute12
CustomAttribute13
CustomAttribute14
CustomAttribute15
ExtensionCustomAttribute1
ExtensionCustomAttribute2
ExtensionCustomAttribute3
ExtensionCustomAttribute4
ExtensionCustomAttribute5
InPlaceHolds
ArchiveName
ArchiveQuota
ArchiveStatus
ArchiveWarningQuota
AdminDisplayVersion
ExchangeVersion
ResetPasswordOnNextLogon
HiddenFromAddressListsEnabled
AuditEnabled
AuditLogAgeLimit
Database
RetainDeletedItemsUntilBackup
RetainDeletedItemsFor
Languages
ExchangeUserAccountControl
MailboxGuid
OwnerADGuid
ItemCount
DeletedItemCount
LastLogonTime
StorageLimitStatus
IsClutterEnabled
AccessRights
IsInherited
Permission Deny
Permission User

Print Friendly, PDF & Email
Updated on December 4, 2018

Was this article helpful?

Related Articles