SharePoint Audit Log Event ID 35
35: Permission level deleted
This is an event from
SharePoint
audit event from
LOGbinder SP
generated by
.
On this page
A permission level or "role" was deleted. Permission levels are determined at Site Collection Administration. If a permission level is deleted all groups that are assigned that level will no longer have that access.
Free Security Log Resources by Randy
- Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
- Site: This is the URL of the site generating this event
- User: name of the user who performed the action
- Object
- Type:
- URL: URL of the object targeted by this operation
- Title: title of the object targeted by this operation
- Description: discription of the object that appears on the page
- Permission Level Details:
- ID: internal to SharePoint
Supercharger Enterprise
This Event Is Produced By
Which Integrates with Your SIEM