Azure User account creation tracking and logging

Question

We have few user accounts created on Azure since September 1st, 2023 and we want to know how these accounts were created, who created them and what actions have been done on each account since its creation. Is there any way we can have these information on Azure Portal? Please advice. Thank you.

Answer 1

Hi @Bachir Djebbar

Thank you for post!

I understand that you would like to know details of user account created on Entra ID.

To get the details of user account created Entra ID provides audit log feature which it gives the information of all activity within the Azure.

You can view and analyze user activities. You can filter the logs based on specific criteria, such as user, activity type, date, etc. This allows you to track user sign-ins, application usage, role assignments, and other activities.

To check the audit log for user, Sign in to the Microsoft Entra admin center as at least a Security Administrator. Browse to Identity>Users>All Users->choose the required user.

I n the user profile you can see the Audit Logs from the left menu which is shown in the below picture.
In the date filter you can set the start date and end date of the interval as per your requirement you can see the all the activity of the user.

I hope this information helps! please Feel free to ask any questions you may have.

Reference: https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-audit-logs

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-sign-ins

Thanks,

Akhilesh.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.