See the below text from our document on how to set up the security ourselves
Whenever you create a Site Collection, two O365 groups get created (xxx-Owners and xxx-Members). For retro-compatibility, these O365 groups are automatically added to the SharePoint groups at creation time.
(Note for SharePoint gurus: O365-xxx-Members is mapped to SharePoint-xxx-members, but O365-xxx-Owners is mapped to… Site Collection Administrators! Crazy.)
SharePoint membership grants access to SharePoint resources, while access to Teams features (Channels, tabs, apps) is controlled directly via O365 groups.
The problem with this model is we cannot add AD (Active Directory) groups (or even O365 groups) within O365 groups (no nesting allowed). So, if we want to give access to two different sites to the same people (say SSWDevelopers), we must add ALL MEMBERS manually on EACH generated O365 group. That is ridiculous, and hard to maintain long term.
When I click on “Details” (or double click), I can see :
Figure: audit log results detail panel
This is terribly misleading ! The source is displayed as “/Shared Documents/xxx”, which I assumed being “sswcom.sharepoint.com/Shared Documents/xxx”, but is in fact “sswcom.sharepoint.com/sites/SSWNetworkAdmins/Shared Documents/xxx”. The displayed path is indeed relative, but relative to the site collection, not the whole tenant. Which is misleading in a “unified” log (where results can come from pretty much any site collection).
The “File, Folder or Site” box shouldn’t a simple text filter.
Say I want to have results for my root site only (sswcom.SharePoint.com) – without subsites (say, sswcom.SharePoint.com/sysadmins), I have currently no way of doing it. Searching for “sswcom.sharepoint.com” will give me results that are in subsites or pretty much anything that includes “sswcom.sharepoint.com”.
Suggestion: Either implement “smart” search with the keyword (E.g. “sswcom.sharepoint.com” AND (NOT “sswcom.sharepoint.com/sysadmin”)) OR add a multi-select dropdown to pick the sources (sites, subsites, teams, etc…)
Figure: “file, folder or site” filter box at the bottom of search criteria