All user actions taking place in Backup portal are listed in Audit log, apart from the following exceptions:
- Signed-in user accessing his/her own OneDrive or Mail folders
- Signed-in Admin user browsing shared organization data (SharePoint & Teams)
However, if user restores or downloads his/her own data, or Admin user restores or downloads shared organization data, these actions are visible in Audit log.