SharePointActivityUserDetail
Captures individual user actions within SharePoint, such as file modifications, site visits, and sharing activity. It supports audit logging and productivity analysis.
Select
The cmdlet uses the Microsoft Exchange API to process WHERE clause conditions built with the following columns and operators:
- Period supports the '=' operator.
- Date supports the '=' operator.
The rest of the filter is executed client-side in the cmdlet.
At a minimum, a Date or Period column is required to get the report data. By default, the driver makes a request of the period as D7 if no filter is specified.
For example, the following query is processed server-side:
SELECT * FROM SharePointActivityUserDetail WHERE Period = 'D7' SELECT * FROM SharePointActivityUserDetail WHERE Date = '2023-04-19'
Columns
| Name | Type | Description |
| ReportRefreshDate | Date | The date on which the SharePoint activity report data was last refreshed. Reflects the most recent day for which user activity data is available. |
| UserPrincipalName | String | The unique user principal name (UPN) of the individual whose SharePoint activity is being tracked. Typically formatted as an email address. |
| IsDeleted | Boolean | Indicates whether the user account associated with the activity data has been deleted from the directory. A value of true means the user is no longer active. |
| DeletedDate | String | The date on which the user account was deleted from the system, if applicable. This value is empty for active users. |
| LastActivityDate | Date | The most recent date on which the user performed any SharePoint-related activity, including file views, edits, syncs, or sharing. |
| ViewedOrEditedFileCount | Integer | The total number of files the user has either viewed or edited on SharePoint sites during the report period. |
| SyncedFileCount | Integer | The number of files the user has synchronized between their local device and SharePoint using the OneDrive sync client. |
| SharedInternallyFileCount | Integer | The number of files the user has shared with others inside the organization through SharePoint sharing features. |
| SharedExternallyFileCount | Integer | The number of files the user has shared with people outside the organization via SharePoint external sharing capabilities. |
| VisitedPageCount | Integer | The total number of SharePoint pages the user has visited during the reporting period. This includes visits to site homepages and document libraries. |
| AssignedProducts | String | A comma-separated list of Microsoft products assigned to the user. May include services such as SharePoint Online, Exchange Online, Teams, and others. |
| ReportPeriod | Integer | The duration of the report in days, indicating how far back the SharePoint activity data extends. Common values include 7, 30, 90, and 180. |
Pseudo-Columns
Pseudo column fields are used in the WHERE clause of SELECT statements and offer a more granular control over the tuples that are returned from the data source.
| Name | Type | Description |
| Period | String | Specifies the time interval over which activity is aggregated. Acceptable values are D7, D30, D90, and D180, each representing the number of days in the reporting window.
The allowed values are D7, D30, D90, D180. The default value is D7. |
| Date | Date | The specific calendar date for which user activity data is returned, formatted as YYYY-MM-DD. Must be within the last 30 days, as older data is not retained. |