I have to audit Azure Admin role membership modification. Can anyone tell me how to export that report for any specific admin role(i.e. Authentication Administrator). @AmanpreetSingh-MSFT Please help.

Hi @Saurabh Sharma · Thank you for reaching out. For this purpose, you need to Create an access review of Azure AD roles in Privileged Identity Management and then you can Export the report in CSV format. ----------------------------------------------------------------------------------------------------------- Please " Accept the answer " if the information helped you. This will help us and others in the community as well.

How to check Azure Admin role membership modifcation report/logs

Accepted answer

AmanpreetSingh-MSFT 56,716 Reputation points

2020-12-03T09:28:57.227+00:00

Hi @Saurabh Sharma · Thank you for reaching out.

For this purpose, you need to Create an access review of Azure AD roles in Privileged Identity Management and then you can Export the report in CSV format.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

1 person found this answer helpful.
Saurabh Sharma 121 Reputation points

2020-12-03T09:32:29.997+00:00

Does it require any special license ?

AmanpreetSingh-MSFT 56,716 Reputation points

2020-12-03T09:44:57.08+00:00

Hi @Saurabh Sharma · Yes, this feature is part of Privileged Identity Management which requires Azure AD Premium P2 License as documented here: License requirements

Saurabh Sharma 121 Reputation points

2020-12-03T14:09:09.737+00:00

Thanks @AmanpreetSingh-MSFT

I have checked and found we do not have Azure AD Premium P2 License . Is there any other way to export this report ? like Powershell etc...

AmanpreetSingh-MSFT 56,716 Reputation points

2020-12-03T15:24:19.043+00:00

Hi @Saurabh Sharma · In that case, you can check Azure AD > Users > Audit Logs and apply Category:RoleManagement filter as highlighted below. You can download the report in CSV or JSON format as well. However, you can't apply filter specifically for Authenticator Admin role in the portal.

Also, check How long does Azure AD store the data?

You can schedule this script to run at a specific interval to automate the export of audit logs and store the logs on a local server in CSV format and then filter logs based on RoleManagement category.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to check Azure Admin role membership modifcation report/logs

0 additional answers

Your answer