Information about user joining a group

Question

Information about user joining a group

Oscar da Assuncao Alfredo Filho 21

Hi!

We have in our company an Active Directory connected with our Azure AD via AD Connect and this is working perfectly.

We don't know how to find audit information to know exactly when (date) a user was assigned to a certain group.

Can you tell me if this information is enabled or do we have to enable it? Can you help us?

Answer 1

Andy David - MVP 120.6K MVP

You can check the Azure audit logs but they only go back 30 days so unless its within that time or you offload the logs for long term keeping there isnt much you can do unless you are also using some auditing on-prem as well.

https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-data-retention

Oscar da Assuncao Alfredo Filho 21 Reputation points

2022-11-03T14:36:52.743+00:00

Tks for the answer!
Are there some way to increase amount of retained days for audit logs or its necessary use third party system to integrate these log datas?
Andy David - MVP 120.6K Reputation points MVP

2022-11-03T14:45:12.473+00:00

You can use Azure monitor
https://connectioncloudsupport.zendesk.com/hc/en-us/articles/4402713388569-Extending-Azure-Active-Directory-Log-Retention
Danny Zollner 7,011 Reputation points Microsoft Employee

2022-11-03T17:43:55.897+00:00

FYI - as you mentioned that you're syncing from AD -> AAD, audit logs don't show every membership change that came from AD last I checked, instead they show that the group was updated. You'd need to capture audit logs from on-premises AD rather than AAD if the groups are synced and originate from on-premises AD.

Information about user joining a group

0 additional answers

Activity