Add Support for Auditing Microsoft Teams Channel-Level Activities in the Teams Collector

What is a one sentence summary of your feature request?

Support auditing of Microsoft Teams channel-level activities, including creation, deletion, and modifications, in the Netwrix Auditor Teams collector.

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

The current Teams collector does not capture events related to channel objects, which results in incomplete visibility into collaboration governance within Microsoft Teams. Channel manipulation—such as creating, deleting, or modifying a channel—is a critical activity that affects workspace structure, data exposure, and compliance posture. Adding support for channel-level auditing would enable organizations to track these changes consistently, improve security monitoring, and achieve more comprehensive reporting across all Teams components. Implementing this capability directly within the collector is the most efficient and accurate way to ensure consistent detection and normalization of these events.

How do you currently solve the challenges you have by not having this feature?

At the moment, the only alternatives are manual reviews in the Microsoft 365 audit logs, which are time-consuming, inconsistent, and do not provide centralized reporting or alerting. These workarounds lack correlation with other audited activities and do not meet the same level of visibility and automation provided by Netwrix Auditor.

3 Likes