Azure Event Grid Azure-Microsoft.EventGrid

operationName	Description	Sample	Rule
any	Catch-all for Azure-Microsoft.EventGrid rules that match the resource provider but no specific operation.	N	N
Microsoft.EventGrid/domains/delete	Delete a domain	Y	N
Microsoft.EventGrid/domains/eventSubscriptions/delete	Delete a Domain eventSubscription	N	N
Microsoft.EventGrid/domains/eventSubscriptions/getDeliveryAttributes/action	Get Domain EventSubscription Delivery Attributes	N	N
Microsoft.EventGrid/domains/eventSubscriptions/getFullUrl/action	Get full URL for the Domain event subscription	N	N
Microsoft.EventGrid/domains/eventSubscriptions/write	Create or update a Domain eventSubscription	N	N
Microsoft.EventGrid/domains/listKeys/action	List keys for a domain	N	N
Microsoft.EventGrid/domains/networkSecurityPerimeterAssociationProxies/delete	Delete NspAssociationProxies for domains	N	N
Microsoft.EventGrid/domains/networkSecurityPerimeterAssociationProxies/write	Write NspAssociationProxies for domains	N	N
Microsoft.EventGrid/domains/privateEndpointConnectionProxies/delete	Delete PrivateEndpointConnectionProxies for domains	N	N
Microsoft.EventGrid/domains/privateEndpointConnectionProxies/validate/action	Validate PrivateEndpointConnectionProxies for domains	N	N
Microsoft.EventGrid/domains/privateEndpointConnectionProxies/write	Write PrivateEndpointConnectionProxies for domains	N	N
Microsoft.EventGrid/domains/privateEndpointConnections/delete	Delete PrivateEndpointConnections for domains	N	N
Microsoft.EventGrid/domains/privateEndpointConnections/write	Write PrivateEndpointConnections for domains	N	N
Microsoft.EventGrid/domains/PrivateEndpointConnectionsApproval/action	Approve PrivateEndpointConnections for domains	N	N
Microsoft.EventGrid/domains/regenerateKey/action	Regenerate key for a domain	N	N
Microsoft.EventGrid/domains/topics/delete	Delete a domain topic	N	N
Microsoft.EventGrid/domains/topics/eventSubscriptions/delete	Delete a DomainTopic eventSubscription	N	N
Microsoft.EventGrid/domains/topics/eventSubscriptions/getDeliveryAttributes/action	Get DomainTopic EventSubscription Delivery Attributes	N	N
Microsoft.EventGrid/domains/topics/eventSubscriptions/getFullUrl/action	Get full URL for the DomainTopic event subscription	N	N
Microsoft.EventGrid/domains/topics/eventSubscriptions/write	Create or update a DomainTopic eventSubscription	N	N
Microsoft.EventGrid/domains/topics/write	Create or update a domain topic	N	N
Microsoft.EventGrid/domains/write	Create or update a domain	Y	N
Microsoft.EventGrid/eventSubscriptions/delete	Delete an eventSubscription	N	N
Microsoft.EventGrid/eventSubscriptions/getDeliveryAttributes/action	Get EventSubscription Delivery Attributes	N	N
Microsoft.EventGrid/eventSubscriptions/getFullUrl/action	Get full URL for the event subscription	N	N
Microsoft.EventGrid/eventSubscriptions/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for event subscriptions	N	N
Microsoft.EventGrid/eventSubscriptions/write	Create or update an eventSubscription	N	N
Microsoft.EventGrid/extensionTopics/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for topics	N	N
Microsoft.EventGrid/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action	Update notifications for network security perimeter	N	N
Microsoft.EventGrid/namespaces/caCertificates/delete	Delete a CA Certificate	N	N
Microsoft.EventGrid/namespaces/caCertificates/write	Create or update a CA Certificate	N	N
Microsoft.EventGrid/namespaces/clientGroups/delete	Delete a client group	N	N
Microsoft.EventGrid/namespaces/clientGroups/write	Create or update a client group	N	N
Microsoft.EventGrid/namespaces/clients/delete	Delete a client	N	N
Microsoft.EventGrid/namespaces/clients/write	Create or update a client	N	N
Microsoft.EventGrid/namespaces/delete	Delete a namespace	N	N
Microsoft.EventGrid/namespaces/listKeys/action	List keys for a namespace	N	N
Microsoft.EventGrid/namespaces/permissionBindings/delete	Delete a Permission Binding	N	N
Microsoft.EventGrid/namespaces/permissionBindings/write	Create or update a Permission Binding	N	N
Microsoft.EventGrid/namespaces/privateEndpointConnectionProxies/delete	Delete PrivateEndpointConnectionProxies for namespaces	N	N
Microsoft.EventGrid/namespaces/privateEndpointConnectionProxies/validate/action	Validate PrivateEndpointConnectionProxies for namespaces	N	N
Microsoft.EventGrid/namespaces/privateEndpointConnectionProxies/write	Write PrivateEndpointConnectionProxies for namespaces	N	N
Microsoft.EventGrid/namespaces/privateEndpointConnections/delete	Delete PrivateEndpointConnections for namespaces	N	N
Microsoft.EventGrid/namespaces/privateEndpointConnections/write	Write PrivateEndpointConnections for namespaces	N	N
Microsoft.EventGrid/namespaces/PrivateEndpointConnectionsApproval/action	Approve PrivateEndpointConnections for namespaces	N	N
Microsoft.EventGrid/namespaces/regenerateKey/action	Regenerate key for a namespace	N	N
Microsoft.EventGrid/namespaces/topics/delete	Delete a namespace topic	N	N
Microsoft.EventGrid/namespaces/topics/eventSubscriptions/delete	Delete a namespace topic event subscription	N	N
Microsoft.EventGrid/namespaces/topics/eventSubscriptions/write	Create or update a namespace topic event subscription	N	N
Microsoft.EventGrid/namespaces/topics/listKeys/action	List keys for a namespace topic	N	N
Microsoft.EventGrid/namespaces/topics/regenerateKey/action	Regenerate key for a namespace topic	N	N
Microsoft.EventGrid/namespaces/topics/write	Create or update a namespace topic	N	N
Microsoft.EventGrid/namespaces/topicSpaces/delete	Delete a Topic Space	N	N
Microsoft.EventGrid/namespaces/topicSpaces/write	Create or update a Topic Space	N	N
Microsoft.EventGrid/namespaces/write	Create or update a namespace	N	N
Microsoft.EventGrid/partnerConfigurations/authorizePartner/action	Authorize a partner in the partner configuration	N	N
Microsoft.EventGrid/partnerConfigurations/delete	Delete a partner configuration	N	N
Microsoft.EventGrid/partnerConfigurations/unauthorizePartner/action	Unauthorize a partner in the partner configuration	N	N
Microsoft.EventGrid/partnerConfigurations/write	Create or update a partner configuration	N	N
Microsoft.EventGrid/partnerDestinations/activate/action	Activate a partner destination	N	N
Microsoft.EventGrid/partnerDestinations/delete	Delete a partner destination	N	N
Microsoft.EventGrid/partnerDestinations/getPartnerDestinationChannelInfo/action	Get channel details of activated partner destination	N	N
Microsoft.EventGrid/partnerDestinations/reLinkPartnerDestination/action	Re-link an idle partner destination to a newly created channel	N	N
Microsoft.EventGrid/partnerDestinations/setToIdleState/action	Set provisioning status of partner destination to idle	N	N
Microsoft.EventGrid/partnerDestinations/write	Create or update a partner destination	N	N
Microsoft.EventGrid/partnerNamespaces/channels/channelReadinessStateChange/action	Change channel readiness state	N	N
Microsoft.EventGrid/partnerNamespaces/channels/delete	Delete a channel	N	N
Microsoft.EventGrid/partnerNamespaces/channels/getFullUrl/action	Get full URL for the partner destination channel	N	N
Microsoft.EventGrid/partnerNamespaces/channels/SetChannelToIdle/action	Set provisioning status of channel to idle	N	N
Microsoft.EventGrid/partnerNamespaces/channels/write	Create or update a channel	N	N
Microsoft.EventGrid/partnerNamespaces/delete	Delete a partner namespace	N	N
Microsoft.EventGrid/partnerNamespaces/eventChannels/channelReadinessStateChange/action	Change event channel readiness state	N	N
Microsoft.EventGrid/partnerNamespaces/eventChannels/delete	Delete an event channel	N	N
Microsoft.EventGrid/partnerNamespaces/eventChannels/SetEventChannelToIdle/action	Set provisioning status of event channel to idle	N	N
Microsoft.EventGrid/partnerNamespaces/eventChannels/write	Create or update an event channel	N	N
Microsoft.EventGrid/partnerNamespaces/listKeys/action	List keys for a partner namespace	N	N
Microsoft.EventGrid/partnerNamespaces/privateEndpointConnectionProxies/delete	Delete PrivateEndpointConnectionProxies for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/privateEndpointConnectionProxies/validate/action	Validate PrivateEndpointConnectionProxies for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/privateEndpointConnectionProxies/write	Write PrivateEndpointConnectionProxies for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/privateEndpointConnections/delete	Delete PrivateEndpointConnections for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/privateEndpointConnections/write	Write PrivateEndpointConnections for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/PrivateEndpointConnectionsApproval/action	Approve PrivateEndpointConnections for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for partner namespaces	N	N
Microsoft.EventGrid/partnerNamespaces/regenerateKey/action	Regenerate key for a partner namespace	N	N
Microsoft.EventGrid/partnerNamespaces/write	Create or update a partner namespace	N	N
Microsoft.EventGrid/partnerRegistrations/delete	Delete a partner registration	N	N
Microsoft.EventGrid/partnerRegistrations/write	Create or update a partner registration	N	N
Microsoft.EventGrid/partnerTopics/activate/action	Activate a partner topic	N	N
Microsoft.EventGrid/partnerTopics/deactivate/action	Deactivate a partner topic	N	N
Microsoft.EventGrid/partnerTopics/delete	Delete a partner topic	N	N
Microsoft.EventGrid/partnerTopics/eventSubscriptions/delete	Delete a partner topic event subscription	N	N
Microsoft.EventGrid/partnerTopics/eventSubscriptions/getDeliveryAttributes/action	Get PartnerTopic EventSubscription Delivery Attributes	N	N
Microsoft.EventGrid/partnerTopics/eventSubscriptions/getFullUrl/action	Get full URL for the partner topic event subscription	N	N
Microsoft.EventGrid/partnerTopics/eventSubscriptions/write	Create or update a PartnerTopic eventSubscription	N	N
Microsoft.EventGrid/partnerTopics/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for partner topics	N	N
Microsoft.EventGrid/partnerTopics/reLinkPartnerTopic/action	Re-link an idle PartnerTopic to a newly created channel	N	N
Microsoft.EventGrid/partnerTopics/setToIdleState/action	Set provisioning status of partner topic to idle	N	N
Microsoft.EventGrid/partnerTopics/write	Create or update a partner topic	N	N
Microsoft.EventGrid/register/action	Registers the subscription for the EventGrid resource provider.	Y	N
Microsoft.EventGrid/systemTopics/delete	Delete a system topic	N	N
Microsoft.EventGrid/systemTopics/eventSubscriptions/delete	Delete a SystemTopic eventSubscription	N	N
Microsoft.EventGrid/systemTopics/eventSubscriptions/getDeliveryAttributes/action	Get SystemTopic EventSubscription Delivery Attributes	N	N
Microsoft.EventGrid/systemTopics/eventSubscriptions/getFullUrl/action	Get full URL for the SystemTopic event subscription	N	N
Microsoft.EventGrid/systemTopics/eventSubscriptions/write	Create or update a SystemTopic eventSubscription	N	N
Microsoft.EventGrid/systemTopics/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for system topics	N	N
Microsoft.EventGrid/systemTopics/write	Create or update a system topic	N	N
Microsoft.EventGrid/topics/delete	Delete a topic	Y	N
Microsoft.EventGrid/topics/eventSubscriptions/delete	Delete a Topic eventSubscription	N	N
Microsoft.EventGrid/topics/eventSubscriptions/getDeliveryAttributes/action	Get Topic EventSubscription Delivery Attributes	N	N
Microsoft.EventGrid/topics/eventSubscriptions/getFullUrl/action	Get full URL for the Topic event subscription	N	N
Microsoft.EventGrid/topics/eventSubscriptions/write	Create or update a Topic eventSubscription	N	N
Microsoft.EventGrid/topics/listKeys/action	List keys for a topic	N	N
Microsoft.EventGrid/topics/networkSecurityPerimeterAssociationProxies/delete	Delete NspAssociationProxies for topics	N	N
Microsoft.EventGrid/topics/networkSecurityPerimeterAssociationProxies/write	Write NspAssociationProxies for topics	N	N
Microsoft.EventGrid/topics/privateEndpointConnectionProxies/delete	Delete PrivateEndpointConnectionProxies for topics	N	N
Microsoft.EventGrid/topics/privateEndpointConnectionProxies/validate/action	Validate PrivateEndpointConnectionProxies for topics	N	N
Microsoft.EventGrid/topics/privateEndpointConnectionProxies/write	Write PrivateEndpointConnectionProxies for topics	N	N
Microsoft.EventGrid/topics/privateEndpointConnections/delete	Delete PrivateEndpointConnections for topics	N	N
Microsoft.EventGrid/topics/privateEndpointConnections/write	Write PrivateEndpointConnections for topics	N	N
Microsoft.EventGrid/topics/PrivateEndpointConnectionsApproval/action	Approve PrivateEndpointConnections for topics	N	N
Microsoft.EventGrid/topics/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for topics	N	N
Microsoft.EventGrid/topics/regenerateKey/action	Regenerate key for a topic	N	N
Microsoft.EventGrid/topics/write	Create or update a topic	Y	N
Microsoft.EventGrid/unregister/action	Unregisters the subscription for the EventGrid resource provider.	N	N

any: Azure Event Grid (catch-all)

Namespace: Microsoft.EventGrid

Description

Catch-all for Azure-Microsoft.EventGrid rules that match the resource provider but no specific operation.

Microsoft.EventGrid/domains/delete

Namespace: Microsoft.EventGrid

Description

Delete a domain

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "action": "Microsoft.EventGrid/domains/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "action": "Microsoft.EventGrid/domains/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "89efeffc-5011-4017-b208-2bc9822fff48",
  "EventDataId": "4309e501-19ec-5a51-8c72-3166515174d1",
  "EventSubmissionTimestamp": "2026-07-03T01:36:36.4646636Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.EVENTGRID/DOMAINS/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "message": "Microsoft.EventGrid/domains/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "4309e501-19ec-5a51-8c72-3166515174d1",
    "eventSubmissionTimestamp": "2026-07-03T01:36:36.4646636Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adegd",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "message": "Microsoft.EventGrid/domains/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "4309e501-19ec-5a51-8c72-3166515174d1",
    "eventSubmissionTimestamp": "2026-07-03T01:36:36.4646636Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adegd",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.EVENTGRID",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.EventGrid/domains/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete a Domain eventSubscription

Microsoft.EventGrid/domains/eventSubscriptions/getDeliveryAttributes/action

Namespace: Microsoft.EventGrid

Description

Get Domain EventSubscription Delivery Attributes

Microsoft.EventGrid/domains/eventSubscriptions/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the Domain event subscription

Microsoft.EventGrid/domains/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update a Domain eventSubscription

Microsoft.EventGrid/domains/listKeys/action

Namespace: Microsoft.EventGrid

Description

List keys for a domain

Microsoft.EventGrid/domains/networkSecurityPerimeterAssociationProxies/delete

Namespace: Microsoft.EventGrid

Description

Delete NspAssociationProxies for domains

Microsoft.EventGrid/domains/networkSecurityPerimeterAssociationProxies/write

Namespace: Microsoft.EventGrid

Description

Write NspAssociationProxies for domains

Microsoft.EventGrid/domains/privateEndpointConnectionProxies/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnectionProxies for domains

Microsoft.EventGrid/domains/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.EventGrid

Description

Validate PrivateEndpointConnectionProxies for domains

Microsoft.EventGrid/domains/privateEndpointConnectionProxies/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnectionProxies for domains

Microsoft.EventGrid/domains/privateEndpointConnections/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnections for domains

Microsoft.EventGrid/domains/privateEndpointConnections/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnections for domains

Microsoft.EventGrid/domains/PrivateEndpointConnectionsApproval/action

Namespace: Microsoft.EventGrid

Description

Approve PrivateEndpointConnections for domains

Microsoft.EventGrid/domains/regenerateKey/action

Namespace: Microsoft.EventGrid

Description

Regenerate key for a domain

Microsoft.EventGrid/domains/topics/delete

Namespace: Microsoft.EventGrid

Description

Delete a domain topic

Microsoft.EventGrid/domains/topics/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete a DomainTopic eventSubscription

Microsoft.EventGrid/domains/topics/eventSubscriptions/getDeliveryAttributes/action

Namespace: Microsoft.EventGrid

Description

Get DomainTopic EventSubscription Delivery Attributes

Microsoft.EventGrid/domains/topics/eventSubscriptions/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the DomainTopic event subscription

Microsoft.EventGrid/domains/topics/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update a DomainTopic eventSubscription

Microsoft.EventGrid/domains/topics/write

Namespace: Microsoft.EventGrid

Description

Create or update a domain topic

Microsoft.EventGrid/domains/write

Namespace: Microsoft.EventGrid

Description

Create or update a domain

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "action": "Microsoft.EventGrid/domains/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "action": "Microsoft.EventGrid/domains/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "2bc6537a-add4-4b32-89e4-716070272869",
  "EventDataId": "3eed77d5-89cf-9474-4946-65973cefc143",
  "EventSubmissionTimestamp": "2026-07-03T01:36:02.3974475Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.EVENTGRID/DOMAINS/WRITE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "message": "Microsoft.EventGrid/domains/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "3eed77d5-89cf-9474-4946-65973cefc143",
    "eventSubmissionTimestamp": "2026-07-03T01:36:02.3974475Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adegd",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/domains/dwhp9531adegd",
    "message": "Microsoft.EventGrid/domains/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "3eed77d5-89cf-9474-4946-65973cefc143",
    "eventSubmissionTimestamp": "2026-07-03T01:36:02.3974475Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adegd",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.EVENTGRID",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.EventGrid/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete an eventSubscription

Microsoft.EventGrid/eventSubscriptions/getDeliveryAttributes/action

Namespace: Microsoft.EventGrid

Description

Get EventSubscription Delivery Attributes

Microsoft.EventGrid/eventSubscriptions/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the event subscription

Microsoft.EventGrid/eventSubscriptions/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.EventGrid

Description

Creates or updates the diagnostic setting for event subscriptions

Microsoft.EventGrid/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update an eventSubscription

Microsoft.EventGrid/extensionTopics/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.EventGrid

Description

Creates or updates the diagnostic setting for topics

Microsoft.EventGrid/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action

Namespace: Microsoft.EventGrid

Description

Update notifications for network security perimeter

Microsoft.EventGrid/namespaces/caCertificates/delete

Namespace: Microsoft.EventGrid

Description

Delete a CA Certificate

Microsoft.EventGrid/namespaces/caCertificates/write

Namespace: Microsoft.EventGrid

Description

Create or update a CA Certificate

Microsoft.EventGrid/namespaces/clientGroups/delete

Namespace: Microsoft.EventGrid

Description

Delete a client group

Microsoft.EventGrid/namespaces/clientGroups/write

Namespace: Microsoft.EventGrid

Description

Create or update a client group

Microsoft.EventGrid/namespaces/clients/delete

Namespace: Microsoft.EventGrid

Description

Delete a client

Microsoft.EventGrid/namespaces/clients/write

Namespace: Microsoft.EventGrid

Description

Create or update a client

Microsoft.EventGrid/namespaces/delete

Namespace: Microsoft.EventGrid

Description

Delete a namespace

Microsoft.EventGrid/namespaces/listKeys/action

Namespace: Microsoft.EventGrid

Description

List keys for a namespace

Microsoft.EventGrid/namespaces/permissionBindings/delete

Namespace: Microsoft.EventGrid

Description

Delete a Permission Binding

Microsoft.EventGrid/namespaces/permissionBindings/write

Namespace: Microsoft.EventGrid

Description

Create or update a Permission Binding

Microsoft.EventGrid/namespaces/privateEndpointConnectionProxies/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnectionProxies for namespaces

Microsoft.EventGrid/namespaces/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.EventGrid

Description

Validate PrivateEndpointConnectionProxies for namespaces

Microsoft.EventGrid/namespaces/privateEndpointConnectionProxies/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnectionProxies for namespaces

Microsoft.EventGrid/namespaces/privateEndpointConnections/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnections for namespaces

Microsoft.EventGrid/namespaces/privateEndpointConnections/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnections for namespaces

Microsoft.EventGrid/namespaces/PrivateEndpointConnectionsApproval/action

Namespace: Microsoft.EventGrid

Description

Approve PrivateEndpointConnections for namespaces

Microsoft.EventGrid/namespaces/regenerateKey/action

Namespace: Microsoft.EventGrid

Description

Regenerate key for a namespace

Microsoft.EventGrid/namespaces/topics/delete

Namespace: Microsoft.EventGrid

Description

Delete a namespace topic

Microsoft.EventGrid/namespaces/topics/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete a namespace topic event subscription

Microsoft.EventGrid/namespaces/topics/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update a namespace topic event subscription

Microsoft.EventGrid/namespaces/topics/listKeys/action

Namespace: Microsoft.EventGrid

Description

List keys for a namespace topic

Microsoft.EventGrid/namespaces/topics/regenerateKey/action

Namespace: Microsoft.EventGrid

Description

Regenerate key for a namespace topic

Microsoft.EventGrid/namespaces/topics/write

Namespace: Microsoft.EventGrid

Description

Create or update a namespace topic

Microsoft.EventGrid/namespaces/topicSpaces/delete

Namespace: Microsoft.EventGrid

Description

Delete a Topic Space

Microsoft.EventGrid/namespaces/topicSpaces/write

Namespace: Microsoft.EventGrid

Description

Create or update a Topic Space

Microsoft.EventGrid/namespaces/write

Namespace: Microsoft.EventGrid

Description

Create or update a namespace

Microsoft.EventGrid/partnerConfigurations/authorizePartner/action

Namespace: Microsoft.EventGrid

Description

Authorize a partner in the partner configuration

Microsoft.EventGrid/partnerConfigurations/delete

Namespace: Microsoft.EventGrid

Description

Delete a partner configuration

Microsoft.EventGrid/partnerConfigurations/unauthorizePartner/action

Namespace: Microsoft.EventGrid

Description

Unauthorize a partner in the partner configuration

Microsoft.EventGrid/partnerConfigurations/write

Namespace: Microsoft.EventGrid

Description

Create or update a partner configuration

Microsoft.EventGrid/partnerDestinations/activate/action

Namespace: Microsoft.EventGrid

Description

Activate a partner destination

Microsoft.EventGrid/partnerDestinations/delete

Namespace: Microsoft.EventGrid

Description

Delete a partner destination

Microsoft.EventGrid/partnerDestinations/getPartnerDestinationChannelInfo/action

Namespace: Microsoft.EventGrid

Description

Get channel details of activated partner destination

Microsoft.EventGrid/partnerDestinations/reLinkPartnerDestination/action

Namespace: Microsoft.EventGrid

Description

Re-link an idle partner destination to a newly created channel

Microsoft.EventGrid/partnerDestinations/setToIdleState/action

Namespace: Microsoft.EventGrid

Description

Set provisioning status of partner destination to idle

Microsoft.EventGrid/partnerDestinations/write

Namespace: Microsoft.EventGrid

Description

Create or update a partner destination

Microsoft.EventGrid/partnerNamespaces/channels/channelReadinessStateChange/action

Namespace: Microsoft.EventGrid

Description

Change channel readiness state

Microsoft.EventGrid/partnerNamespaces/channels/delete

Namespace: Microsoft.EventGrid

Description

Delete a channel

Microsoft.EventGrid/partnerNamespaces/channels/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the partner destination channel

Microsoft.EventGrid/partnerNamespaces/channels/SetChannelToIdle/action

Namespace: Microsoft.EventGrid

Description

Set provisioning status of channel to idle

Microsoft.EventGrid/partnerNamespaces/channels/write

Namespace: Microsoft.EventGrid

Description

Create or update a channel

Microsoft.EventGrid/partnerNamespaces/delete

Namespace: Microsoft.EventGrid

Description

Delete a partner namespace

Microsoft.EventGrid/partnerNamespaces/eventChannels/channelReadinessStateChange/action

Namespace: Microsoft.EventGrid

Description

Change event channel readiness state

Microsoft.EventGrid/partnerNamespaces/eventChannels/delete

Namespace: Microsoft.EventGrid

Description

Delete an event channel

Microsoft.EventGrid/partnerNamespaces/eventChannels/SetEventChannelToIdle/action

Namespace: Microsoft.EventGrid

Description

Set provisioning status of event channel to idle

Microsoft.EventGrid/partnerNamespaces/eventChannels/write

Namespace: Microsoft.EventGrid

Description

Create or update an event channel

Microsoft.EventGrid/partnerNamespaces/listKeys/action

Namespace: Microsoft.EventGrid

Description

List keys for a partner namespace

Microsoft.EventGrid/partnerNamespaces/privateEndpointConnectionProxies/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnectionProxies for partner namespaces

Microsoft.EventGrid/partnerNamespaces/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.EventGrid

Description

Validate PrivateEndpointConnectionProxies for partner namespaces

Microsoft.EventGrid/partnerNamespaces/privateEndpointConnectionProxies/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnectionProxies for partner namespaces

Microsoft.EventGrid/partnerNamespaces/privateEndpointConnections/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnections for partner namespaces

Microsoft.EventGrid/partnerNamespaces/privateEndpointConnections/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnections for partner namespaces

Microsoft.EventGrid/partnerNamespaces/PrivateEndpointConnectionsApproval/action

Namespace: Microsoft.EventGrid

Description

Approve PrivateEndpointConnections for partner namespaces

Microsoft.EventGrid/partnerNamespaces/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.EventGrid

Description

Creates or updates the diagnostic setting for partner namespaces

Microsoft.EventGrid/partnerNamespaces/regenerateKey/action

Namespace: Microsoft.EventGrid

Description

Regenerate key for a partner namespace

Microsoft.EventGrid/partnerNamespaces/write

Namespace: Microsoft.EventGrid

Description

Create or update a partner namespace

Microsoft.EventGrid/partnerRegistrations/delete

Namespace: Microsoft.EventGrid

Description

Delete a partner registration

Microsoft.EventGrid/partnerRegistrations/write

Namespace: Microsoft.EventGrid

Description

Create or update a partner registration

Microsoft.EventGrid/partnerTopics/activate/action

Namespace: Microsoft.EventGrid

Description

Activate a partner topic

Microsoft.EventGrid/partnerTopics/deactivate/action

Namespace: Microsoft.EventGrid

Description

Deactivate a partner topic

Microsoft.EventGrid/partnerTopics/delete

Namespace: Microsoft.EventGrid

Description

Delete a partner topic

Microsoft.EventGrid/partnerTopics/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete a partner topic event subscription

Microsoft.EventGrid/partnerTopics/eventSubscriptions/getDeliveryAttributes/action

Namespace: Microsoft.EventGrid

Description

Get PartnerTopic EventSubscription Delivery Attributes

Microsoft.EventGrid/partnerTopics/eventSubscriptions/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the partner topic event subscription

Microsoft.EventGrid/partnerTopics/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update a PartnerTopic eventSubscription

Microsoft.EventGrid/partnerTopics/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.EventGrid

Description

Creates or updates the diagnostic setting for partner topics

Microsoft.EventGrid/partnerTopics/reLinkPartnerTopic/action

Namespace: Microsoft.EventGrid

Description

Re-link an idle PartnerTopic to a newly created channel

Microsoft.EventGrid/partnerTopics/setToIdleState/action

Namespace: Microsoft.EventGrid

Description

Set provisioning status of partner topic to idle

Microsoft.EventGrid/partnerTopics/write

Namespace: Microsoft.EventGrid

Description

Create or update a partner topic

Microsoft.EventGrid/register/action

Namespace: Microsoft.EventGrid

Description

Registers the subscription for the EventGrid resource provider.

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "ActivitySubstatusValue": "OK",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222",
    "action": "Microsoft.EventGrid/register/action",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222",
    "action": "Microsoft.EventGrid/register/action",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "591d418a-f48f-49ef-ae0d-4adf11936824",
  "EventDataId": "2f1eb763-3944-c8d6-35d4-029ea2196297",
  "EventSubmissionTimestamp": "2026-07-03T01:33:32.9053628Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.EVENTGRID/REGISTER/ACTION",
  "Properties": {
    "statusCode": "OK",
    "serviceRequestId": "",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/providers/Microsoft.EventGrid",
    "message": "Microsoft.EventGrid/register/action",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "2f1eb763-3944-c8d6-35d4-029ea2196297",
    "eventSubmissionTimestamp": "2026-07-03T01:33:32.9053628Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/providers/Microsoft.EventGrid",
    "message": "Microsoft.EventGrid/register/action",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "2f1eb763-3944-c8d6-35d4-029ea2196297",
    "eventSubmissionTimestamp": "2026-07-03T01:33:32.9053628Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "statusCode": "OK",
    "serviceRequestId": "",
    "activitySubstatusValue": "OK"
  },
  "ResourceProviderValue": "MICROSOFT.EVENTGRID",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.EventGrid/systemTopics/delete

Namespace: Microsoft.EventGrid

Description

Delete a system topic

Microsoft.EventGrid/systemTopics/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete a SystemTopic eventSubscription

Microsoft.EventGrid/systemTopics/eventSubscriptions/getDeliveryAttributes/action

Namespace: Microsoft.EventGrid

Description

Get SystemTopic EventSubscription Delivery Attributes

Microsoft.EventGrid/systemTopics/eventSubscriptions/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the SystemTopic event subscription

Microsoft.EventGrid/systemTopics/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update a SystemTopic eventSubscription

Microsoft.EventGrid/systemTopics/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.EventGrid

Description

Creates or updates the diagnostic setting for system topics

Microsoft.EventGrid/systemTopics/write

Namespace: Microsoft.EventGrid

Description

Create or update a system topic

Microsoft.EventGrid/topics/delete

Namespace: Microsoft.EventGrid

Description

Delete a topic

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "action": "Microsoft.EventGrid/topics/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "action": "Microsoft.EventGrid/topics/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "0b6d09fb-db0d-4672-a631-251cd0f422ee",
  "EventDataId": "3bafe993-326a-715b-5865-efc3ac283cb6",
  "EventSubmissionTimestamp": "2026-07-03T01:35:29.6376534Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.EVENTGRID/TOPICS/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "message": "Microsoft.EventGrid/topics/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "3bafe993-326a-715b-5865-efc3ac283cb6",
    "eventSubmissionTimestamp": "2026-07-03T01:35:29.6376534Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adeg",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "message": "Microsoft.EventGrid/topics/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "3bafe993-326a-715b-5865-efc3ac283cb6",
    "eventSubmissionTimestamp": "2026-07-03T01:35:29.6376534Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adeg",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.EVENTGRID",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.EventGrid/topics/eventSubscriptions/delete

Namespace: Microsoft.EventGrid

Description

Delete a Topic eventSubscription

Microsoft.EventGrid/topics/eventSubscriptions/getDeliveryAttributes/action

Namespace: Microsoft.EventGrid

Description

Get Topic EventSubscription Delivery Attributes

Microsoft.EventGrid/topics/eventSubscriptions/getFullUrl/action

Namespace: Microsoft.EventGrid

Description

Get full URL for the Topic event subscription

Microsoft.EventGrid/topics/eventSubscriptions/write

Namespace: Microsoft.EventGrid

Description

Create or update a Topic eventSubscription

Microsoft.EventGrid/topics/listKeys/action

Namespace: Microsoft.EventGrid

Description

List keys for a topic

Microsoft.EventGrid/topics/networkSecurityPerimeterAssociationProxies/delete

Namespace: Microsoft.EventGrid

Description

Delete NspAssociationProxies for topics

Microsoft.EventGrid/topics/networkSecurityPerimeterAssociationProxies/write

Namespace: Microsoft.EventGrid

Description

Write NspAssociationProxies for topics

Microsoft.EventGrid/topics/privateEndpointConnectionProxies/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnectionProxies for topics

Microsoft.EventGrid/topics/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.EventGrid

Description

Validate PrivateEndpointConnectionProxies for topics

Microsoft.EventGrid/topics/privateEndpointConnectionProxies/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnectionProxies for topics

Microsoft.EventGrid/topics/privateEndpointConnections/delete

Namespace: Microsoft.EventGrid

Description

Delete PrivateEndpointConnections for topics

Microsoft.EventGrid/topics/privateEndpointConnections/write

Namespace: Microsoft.EventGrid

Description

Write PrivateEndpointConnections for topics

Microsoft.EventGrid/topics/PrivateEndpointConnectionsApproval/action

Namespace: Microsoft.EventGrid

Description

Approve PrivateEndpointConnections for topics

Microsoft.EventGrid/topics/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.EventGrid

Description

Creates or updates the diagnostic setting for topics

Microsoft.EventGrid/topics/regenerateKey/action

Namespace: Microsoft.EventGrid

Description

Regenerate key for a topic

Microsoft.EventGrid/topics/write

Namespace: Microsoft.EventGrid

Description

Create or update a topic

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "action": "Microsoft.EventGrid/topics/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "action": "Microsoft.EventGrid/topics/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "aa86684f-9bbd-45ed-a77e-e0277bf0d8d6",
  "EventDataId": "4fa8f1b1-32b3-2cba-129b-04dba431d565",
  "EventSubmissionTimestamp": "2026-07-03T01:34:56.7855909Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.EVENTGRID/TOPICS/WRITE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "message": "Microsoft.EventGrid/topics/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "4fa8f1b1-32b3-2cba-129b-04dba431d565",
    "eventSubmissionTimestamp": "2026-07-03T01:34:56.7855909Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adeg",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.EventGrid/topics/dwhp9531adeg",
    "message": "Microsoft.EventGrid/topics/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "4fa8f1b1-32b3-2cba-129b-04dba431d565",
    "eventSubmissionTimestamp": "2026-07-03T01:34:56.7855909Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhp9531adeg",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.EVENTGRID",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.EVENTGRID",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}