Reports & Audit Log
Tenaxis keeps a complete, tamper-evident record of everything that happens - every action taken by admins, every automated job, every member change, every policy applied. You can view this in the Audit Log and download structured reports for compliance purposes.
Reports
Go to Reports in the left sidebar to access downloadable compliance reports. All reports are generated as CSV files that you can open in Excel, Google Sheets, or import into your compliance tools.
Available Reports
1. Site Inventory Report
What it contains:
- All SharePoint sites managed by Tenaxis
- For each site: name, status, lifecycle status, risk score, number of owners/members/visitors, template applied, security policy applied, source (provisioned or imported), creation date, last activity date
Use for:
- Providing auditors with a complete list of your SharePoint environment
- Identifying sites without policies applied (compliance gap)
- Finding high-risk sites for remediation planning
- Regular governance reporting to leadership
How to download:
- Go to Reports
- Click Download next to "Site Inventory"
- A CSV file downloads immediately
2. Access Report
What it contains:
- Every user-to-site access relationship
- For each row: site name, user display name, user UPN (email), role (OWNER/MEMBER/VISITOR)
- Includes both internal users and external guests (#EXT# accounts)
Use for:
- Compliance audits requiring proof of "who has access to what"
- Identifying over-privileged users (e.g., too many OWNERs)
- GDPR data minimization - knowing who can see personal data
- Quarterly access control reports
How to download:
- Go to Reports
- Click Download next to "Access Report"
- A CSV file downloads immediately
3. Audit Log Export
What it contains:
- A complete log of all admin actions taken in Tenaxis
- For each entry: timestamp, actor (admin email or "System"), action taken (human-readable description), target (site/user/policy name), whether it succeeded or failed, error details if failed
Use for:
- Security incident investigations ("who changed this site's policy on Tuesday?")
- Proving to auditors that access changes were authorized and logged
- Compliance framework requirements for admin action trails
- Internal IT review meetings
How to download with a date range:
- Go to Reports
- Find "Audit Log Export"
- Select a Start Date and End Date
- Click Download
You'll get all audit entries within that date range as a CSV.
Audit Log (In-App View)
The Audit page in the left sidebar gives you a real-time, paginated view of all audit log entries directly in the Tenaxis interface - no download required.
What You See
Each entry shows:
| Column | What it means |
|---|---|
| Timestamp | Exact date and time of the action |
| Actor | Who performed the action (admin name/email, or "System" for automated actions) |
| Action | A human-readable description of what happened |
| Target | The site, user, policy, or other object the action was applied to |
| Status | Whether the action succeeded ✓ or failed ✗ |
| Error | If failed, what went wrong |
What Gets Logged
Every significant action in Tenaxis is logged:
Site Actions:
- Site provisioned (including which admin approved and the template used)
- Site archived/deleted
- Security policy applied to a site
- Site settings updated
- Site synced from Microsoft 365
User/Access Actions:
- Member added to a site (including their role)
- Member removed from a site
- Site ownership changed
- Admin added to workspace
- Admin removed from workspace
- Admin role changed
Request Actions:
- Site request submitted (by user)
- Site request approved (by which admin)
- Site request rejected (by which admin, with rejection note)
Access Review Actions:
- Review cycle created
- Owner accessed review link
- Each KEEP / REMOVE decision
- Member removed as a result of a review
- Review completed or expired
Lifecycle Actions:
- Site flagged as renewal pending
- Renewal confirmation received (owner clicked link)
- Site escalated due to no response
Offboarding Actions:
- Disabled user identified
- User removed from site(s) via offboarding
Settings Changes:
- Lifecycle settings updated
- Alert thresholds changed
- Naming policy updated
- Access review configuration changed
- Webhook added, updated, or deleted
System Actions:
- Nightly sync results
- Background jobs (provisioning, template application, etc.)
- Webhook delivery attempts
Pagination
The audit log can contain thousands of entries for active organizations. Use the Next / Previous buttons to navigate through pages. Each page shows 100 entries, ordered from newest to oldest.
Using Reports for Compliance Audits
When an auditor asks for documentation of your SharePoint governance, here's what to provide:
ISO 27001 / SOC 2
- Site Inventory - Proves you know what data stores exist
- Access Report - Proves you know who has access
- Audit Log Export (full year) - Proves access changes are logged and reviewed
GDPR
- Access Report - Shows who can access personal data
- Audit Log Export - Shows when access was granted/revoked and by whom
SOX (if applicable)
- Access Report - For financial systems, who can access what
- Audit Log Export - Proves segregation of duties and access reviews occurred
General Internal Audit
- Site Inventory - Management overview of the SharePoint estate
- Access Report - Periodic access control review
- Audit Log Export (date range) - Review of specific incidents or time periods
Tips for Auditors
The reports are designed to be self-explanatory, but here are some tips:
- The Access Report is the single most useful document for "who can access what" questions
- The Audit Log is the single most useful document for "how did this happen / who did this" questions
- All timestamps in Tenaxis are stored and exported in UTC - adjust for your local time zone when reviewing
- The "System" actor in the audit log means the action was performed by an automated Tenaxis job (e.g., nightly sync, lifecycle check), not a human admin