SharePoint Audit Log Event ID 29

SourceSharePoint (LOGbinder SP)
Audit FlagSecurityChange
Windows Security Log
 • Subcategory
Object Access
 • Application Generated
Type Success

29: Unique permissions created

This is an event from SharePoint audit event from LOGbinder SP generated by Audit Flag  SecurityChange.

On this page

An object has stopped inheriting permissions from its parent and different permissions have been created for the child object.

Free Security Log Resources by Randy

Description Fields in 29

  • Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
  • Site: This is the URL of the site generating this event
  • User: name of the user who performed the action
  • Parent Object
    • Type: parent object type
    • Subtype: if defined
    • URL: URL of the parent object
    • Title: Parent object title
    • Description:
  • Object
    • URL: URL of the object targeted by this operation

Supercharger Free Edition

Your entire Windows Event Collection environment on a single pane of glass.



Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 29

Unique permissions created
Occurred: 11/22/2011 12:40:43 AM
Site: http://sp2010-sp
User: System Account
Parent Object
  Type: Web
  Subtype: n/a
  URL: http://sp2010-sp
  Title: SP2010
  Description: ddddddddddddddddddd
  URL: Lists/My List
This object no longer inherits permissions from the parent.

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources