The User Rewind feature displays user-related administrative changes occurring in the past 30 days. Tenant administrators and delegated operators can review these recorded changes and revert the most recent action of each event type to its prior value.
What User Rewind does
User Rewind records the following types of user changes:
- User attribute modifications
- Group membership or ownership changes
- License and service plan assignment or removal
You can view all types of user-related activities tracked as changes in the User Rewind tracked changes section of our documentation.
Where permissions allow, operators can reverse individual changes, restoring affected attributes or memberships to their previous values.
The ability to revert changes to user attributes and service plans/licenses is coming soon.
Example: support use case
An example scenario for using User Rewind is to enable support staff to identify and review categorized user changes, including modifications to attributes, group memberships, and license assignments. By referencing these records, administrators can revert the latest modification for an affected property, membership, or license, simplifying incident resolution.
Dashboard capabilities
User Rewind processes Microsoft and CoreView audit logs, aggregating event records for user, group, and license changes. The event list dashboard organizes these events by type, timestamp, and source system.
The event list dashboard includes the following review and filtering capabilities:
- Sort the event list from newest to oldest or oldest to newest
- Filter the event list to a specific period, such as the last 7 days, the past 30 days, or any custom date range within the past 30 days.
- Display an icon next to the timestamp for each change to indicate whether it was performed through the CoreView app or not.
- Display the name of the admin or operator who performed each action
User-related changes in the last 30 days are reported in chronological order. To prevent state conflicts, you may only revert the most recent action of each event type.
For example, if five user properties are edited on one day, and three additional properties are changed for the same user on a later day, only the latest change can be reverted, while the earlier record is available as read-only. For group-related changes, events involving the same group are grouped together in the event log.
For each event, a shortcut button is provided to access linked details on the item affected by the change before reverting.
For example, when reviewing a group membership change, the shortcut opens the relevant group card, where current members and group owners are listed. This allows you to verify the present group membership and ownership status directly, and if required, to confirm the intended reversion with the group owner.
For step-by-step instructions, refer to: