Mastering Identity and Access Management with Microsoft Azure - Second Edition

Azure RMS logging

In this section, we will verify the default enabled Azure RMS logging. Perform the following steps to analyze the usage of the Azure RMS service:

1. Get the actual Azure RMS configuration, as follows:

Get-AadrmConfiguration

2. Get all the log commands, as follows:

Get-Command "*Log*" -Module AADRM

Create an AIP log directory and set the variables, as follows:

New-Item -ItemType directory -Path C:\AIPLogs\UserNew-Item -ItemType directory -Path C:\AIPLogs\Admin$UserLogs = "C:\AIPLogs\User"$AdminLogs = "C:\AIPLogs\Admin"

3. Get the user logs, as follows:

Get-AadrmUserLog -Path $UserLogs -FromDate (Get-Date).AddDays(-45)

4. Get the admin logs, as follows:

Get-AadrmAdminLog -Path $AdminLogs\admin.log

5. Get the status from the document ...