Event Details
User Activity->Object Access->SharePoint Object Access->ChangeAuditor for SharePoint->Permissions access->EventID 50 - Permission level granted
EventID 50 - Permission level granted
 Sample:

                                
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: ChangeAuditor for SharePoint
Filtering Field Equals to Value
EventId 50
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 10.10.2000 19:00:00
Who Account or user name under which the activity occured. User logon name YDOM\ii
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Permission level granted" Permission level granted
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Computer DC1
Severity Specify the seriousness of the event. "Medium" Medium
WhoDomain -
WhereDomain -
Result Successful or Failed -
Object Name Permission level name Read
Object Type "SharePoint Permission level" SharePoint Permission level
Whom -
User logon name User logon name InsertionString46 YDOM\ii
Site URL Site URL Site URL http://yj:40427/TheSite/SubSite
List relative URL List relative URL List relative URL /DocLib/TheFolderRenamed/NewFolderUpdated
Permission level name Permission level name InsertionString18 Read
Permission level allow mask Permission level allow mask Permission level allow mask ViewListItems, EditListItems, ManagePersonalViews, Open, ViewPages, ApplyThemeAndBorder, BrowseDirectories, AddDelPrivateWebParts, UpdatePersonalWebParts
Permission level deny mask Permission level deny mask Permission level deny mask None
Grantee user name Grantee user name Grantee user name
Grantee group name Grantee group name Grantee group name The group
Comments
You must be logged in to comment