OneDriveActivityUserDetail
Tracks OneDrive user activity including file views, edits, and sync actions. This is useful for monitoring user engagement with cloud storage and detecting abnormal file behavior.
Select
The add-in uses the Microsoft Exchange API to process WHERE clause conditions built with the following columns and operators.:
- Period supports the '=' operator.
- Date supports the '=' operator.
The rest of the filter is executed client-side in the add-in.
Either Date or Period column is required to get the data but in case if no filter specified in critera driver will a make request with default value of period as D7
For example, the following query is processed server-side:
SELECT * FROM OneDriveActivityUserDetail WHERE Period = 'D7' SELECT * FROM OneDriveActivityUserDetail WHERE Date = '2023-04-19'
Columns
| Name | Type | Description |
| ReportRefreshDate | Date | The date when the OneDrive activity report was last refreshed. This timestamp reflects the most recent update to the dataset. |
| UserPrincipalName | String | The unique identifier (User Principal Name) of the user whose OneDrive activity is being recorded. Typically in the format of an email address. |
| IsDeleted | Boolean | Indicates whether the user account was deleted at the time of the report. A value of 'true' means the user account no longer exists in the directory. |
| DeletedDate | String | The date on which the user account was deleted from the tenant, if applicable. This is only populated if the account has been removed. |
| LastActivityDate | Date | The most recent date when the user performed any activity in OneDrive, such as viewing, editing, syncing, or sharing files. |
| ViewedOrEditedFileCount | Integer | The total number of files that the user viewed or edited in OneDrive during the reporting period. This includes all file interactions. |
| SyncedFileCount | Integer | The total number of files that were successfully synced between the user's local device and OneDrive during the reporting period. |
| SharedInternallyFileCount | Integer | The number of OneDrive files the user shared with other users within the same organization or tenant during the reporting period. |
| SharedExternallyFileCount | Integer | The number of OneDrive files the user shared with people outside the organization or tenant during the reporting period. |
| AssignedProducts | String | A comma-separated list of Microsoft 365 products assigned to the user, such as Exchange, OneDrive, SharePoint, Microsoft Teams. Each product indicates availability of related services. |
| ReportPeriod | Integer | The duration of time, in days, covered by the OneDrive activity report. This typically matches one of the supported aggregation windows: 7, 30, 90, or 180 days. |
Pseudo-Columns
Pseudo column fields are used in the WHERE clause of SELECT statements and offer a more granular control over the tuples that are returned from the data source.
| Name | Type | Description |
| Period | String | Specifies the aggregation window for the report. Acceptable values are D7, D30, D90, and D180, where Dn represents the number of days. The 'D7' value refers to a period of 7 days, and similarly for other values.
The allowed values are D7, D30, D90, D180. The default value is D7. |
| Date | Date | The specific date for which the activity data is requested, formatted as YYYY-MM-DD. Only dates from the past 30 days are valid for this report. |