SharePoint Audit Log Event ID 33

SourceSharePoint (LOGbinder SP)
Audit FlagSecurityChange
Windows Security Log
 • Subcategory
Object Access
 • Application Generated
Type Success

33: Unique permission levels created

This is an event from SharePoint audit event from LOGbinder SP generated by Audit Flag  SecurityChange.

On this page

A permission level that does not correspond to any of the role levels. Permission levels are determined at Site Collection Administration

Free Security Log Resources by Randy

Description Fields in 33

  • Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
  • Site: This is the URL of the site generating this event
  • User: name of the user who performed the action
  • Object
    • URL: URL of the object targeted by this operation
    • Title: title of the object targeted by this operation
    • Version: version of the object if version control enabled for the object's parent list or library
    • Description: description of the object targeted by this operation

Supercharger Free Edition

Supercharger's built-in Xpath filters leave the noise behind.



Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 33

Unique permission levels created
Occurred: 11/1/2013 6:43:43 PM
Site: http://dev4
User: i:0#.w|lb\administrator
  Type: Web
  URL: testsite
  Title: n/a
  Description: n/a
This object has unique permission levels (role definitions) that are not inherited from its parent.

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources