Beta Channel
The event uses the required Microsoft Graph beta API channel and remains subject to fixture and live-shape verification before default enablement.
Public Coverage Catalog
Coverage should be inspectable before you consent.
Search a typed preview of supported Entra, Intune, and Teams external-access outcomes. Each entry states its permission, source latency, old/new behavior, API channel, and known limitations.
Showing 9 of 9 coverage entries
| Workload | Event Name | Availability | Required Permissions | Latency Class | Old / New | API Channel | Known Limitations |
|---|---|---|---|---|---|---|---|
| Entra | Conditional Access policy state changed ENTRA_CA_POLICY_STATE_CHANGED | Beta channel | AuditLog.Read.All | Polled every 5 minutes | Source supplied | Microsoft Graph beta | Property-level values appear only when Microsoft supplies them. |
| Entra | Conditional Access exclusion changed ENTRA_CA_EXCLUSION_CHANGED | Beta channel | AuditLog.Read.All | Polled every 5 minutes | Source supplied | Microsoft Graph beta | Set deltas require Microsoft to include the changed exclusion property. |
| Entra | Application credential added ENTRA_APP_CREDENTIAL_ADDED | Beta channel | AuditLog.Read.All | Polled every 5 minutes | Not provided | Microsoft Graph beta | Credential secret values are never collected or displayed. |
| Intune | Supported Intune resource updated INTUNE_RESOURCE_UPDATED | Beta channel | DeviceManagementApps.Read.All | Polled every 5 minutes | Not provided | Microsoft Graph beta | A generic update can be shown when property-level values are absent. |
| Intune | Intune policy property changed INTUNE_PROPERTY_CHANGED | Beta channel | DeviceManagementApps.Read.All | Polled every 5 minutes | Source supplied | Microsoft Graph beta | Only supported policy families and source-supplied properties are included. |
| Intune | Intune assignment added INTUNE_ASSIGNMENT_ADDED | Beta channel | DeviceManagementApps.Read.All | Polled every 5 minutes | Not provided | Microsoft Graph beta | Device inventory, check-in, and compliance-state changes are excluded. |
| Teams | External member added to a team TEAMS_EXTERNAL_MEMBER_ADDED_TO_TEAM | Beta channel | Team.ReadBasic.All, Channel.ReadBasic.All, TeamMember.Read.All, ChannelMember.Read.All | Near real time | Source supplied | Microsoft Graph beta | External status requires a supplied tenant ID that differs from the monitored tenant. |
| Teams | External member added to a private or shared channel TEAMS_EXTERNAL_MEMBER_ADDED_TO_CHANNEL | Beta channel | Team.ReadBasic.All, Channel.ReadBasic.All, TeamMember.Read.All, ChannelMember.Read.All | Near real time | Source supplied | Microsoft Graph beta | Private and shared channel membership is monitored separately from team membership. |
| Teams | Membership origin could not be verified TEAMS_MEMBERSHIP_ORIGIN_UNKNOWN | Limited | Team.ReadBasic.All, Channel.ReadBasic.All, TeamMember.Read.All, ChannelMember.Read.All | Near real time | Not provided | Microsoft Graph beta | Dashboard only and non-billable when tenant-origin evidence is insufficient. |
Interpretation
Availability labels describe evidence readiness.
Limited
The event is useful only under its documented constraints, such as dashboard-only treatment when tenant-origin evidence is insufficient.
Put a witness on critical changes.
Start with a focused, source-backed view across the Microsoft 365 tenants you manage.