Does deleting users in Azure AD affect logs referencing that user

Question

I'm looking to delete users in Azure that haven't logged in since a certain date. When you do this in AD, you get issues with logs that show the SID instead of the username. I know in part why this is - if the username changes then old logs become a bit useless.

If I delete a user in Azure AD, what happens when viewing a log that references said user?

Will the old username still be there, or will it just have an ObjectID?

My feeling is that the objectID and the username at the time will remain in the logs, I don't think it does some kind of lookup/translation but I

Answer 1

Hi @GT ,

Thanks for reaching out.

I understand that you faced difficulty to identify users in logs by their username which got deleted in AD and wants to confirm the same in Azure Active Directory.

Your understanding is correct here. Deleting the users in Azure Active Directory does not update any existing logs and you can easily identity the logs by deleted username as it is.

Thanks,
Shweta

-----------------------------------------------

Please remember to "Accept Answer" if answer helped you.