Did you know Office 365 audits almost everything you and your users do? In fact, they even audit access by datacenter admins.
This is all logged to the so called Unified Auditlog. You can search this log from your browser in the Office 365 Activity Report, or, as some may prefer, using Powershell.
Office 365, Azure, Enterprise Mobility and DevOps