Auditors ask who accessed a specific SharePoint budget file last month for a municipal investigation. Which Purview capability records user and admin activities for that kind of inquiry?

Microsoft Purview auditing records user and administrator activities across Microsoft 365 so organizations can investigate access and configuration events. For questions such as who accessed a SharePoint file in a prior period, auditing is the fundamentals answer—not authoring or form-design features.