Tracking app installed on Teams

Question

Several users managed to install a Microsoft Teams application prior to the implementation of a policy that blocks its installation.

However, the Teams Admin Center (TAC) does not provide sufficient details to identify the specific team(s) or the individual users with the app installed.

Is there a PowerShell or any alternatives method to retrieve the following information:

1. The specific Teams (group IDs or display names) where the app has been installed.
2. A list of users who have installed the app in their Teams client (along with user principal names or object IDs)?

Any help would be appreciated

Answer 1

Hi @IvanK,  

Thank you for reaching out to Microsoft Q&A Support 

As a forum moderator, after overviewing your concern, I can say that your case is quite advanced. With the resources currently available to me, my primary recommendation would be to leverage the Audit Log functionality, which you can access via either Microsoft Purview or the Microsoft Defender Portal. For more detailed guidance on this, please refer to the following documentation 

Link articles: 

• Via Defender: Audit log search in the Microsoft Defender portal - Microsoft Defender for Office 365 | Microsoft Learn 
• Via Purview:  Search the audit log | Microsoft Learn 

Once you've accessed the Audit Log interface, you can proceed to configure the specific audit settings. For your case, we recommend selecting 'Installed app in Microsoft Teams' under the 'Activities - friendly name' section 

However, if after reviewing the Audit Log results, they don't provide the level of detail you're looking for, we would then recommend posting your question in the Microsoft Graph - Q&A section. You may be able to receive more specialized assistance there. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have additional questions about this answer, feel free to click "Comment".   

Note: Please follow the steps in our documentation to enable email notifications if you want to receive updates for this thread.