Get when a personal AVD was assigned to an user.

Question

Get when a personal AVD was assigned to an user.

Jorge Garza 5

Hi,

Is there a method to determine when a personal (static) Azure Virtual Desktop (AVD) was assigned to a user?

Thank you...

Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-23T07:32:13.3433333+00:00

Hi Jorge Garza,

As Jose Benjamin Solis Nolasco provided additionally add the filters in Activity Logs section resource type host pool and workspace and then, add another filter for "Event Initiated By" and choose the relevant user and session host entries. After that, kindly review the logs once again.

Note: Azure Activity Logs are retained for 90 days by default unless you have set up log export or longer retention
If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.
Jorge Garza 5 Reputation points

2025-06-23T17:04:43.0166667+00:00

Hi @Siva Pavuluri ,

I used same filter that you mentioned and got same result as @Jose Benjamin Solis Nolasco and inside those logs does not contains any relative information about assignment; as you can see one was of unassign and another for assign, but how to identify which one was for assignment, this is an example for single user, but we could have multiples of the same during 1 day.

Thank you...
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-24T05:48:17.6266667+00:00

Hi Jorge Garza,
I assigned two users to AVD and verified the activity in Azure Monitor by adding the filter: Operation - 'Create role assignment' and selecting the relevant Resource Groups.

and was seen 2 users assigned in logs section:

and open the section we can find the timeStamp when the user assigned and username:

If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.
Jorge Garza 5 Reputation points

2025-06-25T19:28:12.3833333+00:00

Hi @Siva Pavuluri

I did a search for last month logs in azure monitor, and I do not see any log operation named as create role assignments.

We have been assigned for this last months too many AVDs to users, and the only log we got is the same I mentioned.

I believe this role operation log will work whenever someone is added from role permissions perspective not when assign an AVD inside a hostpool.

Thank you...

1 answer

Your answer

Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-23T07:32:13.3433333+00:00

Hi Jorge Garza,

As Jose Benjamin Solis Nolasco provided additionally add the filters in Activity Logs section resource type host pool and workspace and then, add another filter for "Event Initiated By" and choose the relevant user and session host entries. After that, kindly review the logs once again.

Note: Azure Activity Logs are retained for 90 days by default unless you have set up log export or longer retention
If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.
Jorge Garza 5 Reputation points

2025-06-23T17:04:43.0166667+00:00

Hi @Siva Pavuluri ,

I used same filter that you mentioned and got same result as @Jose Benjamin Solis Nolasco and inside those logs does not contains any relative information about assignment; as you can see one was of unassign and another for assign, but how to identify which one was for assignment, this is an example for single user, but we could have multiples of the same during 1 day.

Thank you...
Siva Pavuluri 570 Reputation points Microsoft External Staff Moderator

2025-06-24T05:48:17.6266667+00:00

Hi Jorge Garza,
I assigned two users to AVD and verified the activity in Azure Monitor by adding the filter: Operation - 'Create role assignment' and selecting the relevant Resource Groups.

and was seen 2 users assigned in logs section:

and open the section we can find the timeStamp when the user assigned and username:

If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.
Jorge Garza 5 Reputation points

2025-06-25T19:28:12.3833333+00:00

Hi @Siva Pavuluri

I did a search for last month logs in azure monitor, and I do not see any log operation named as create role assignments.

We have been assigned for this last months too many AVDs to users, and the only log we got is the same I mentioned.

I believe this role operation log will work whenever someone is added from role permissions perspective not when assign an AVD inside a hostpool.

Thank you...

Answer 1

Jose Benjamin Solis Nolasco 3,511

@Jorge Garza I hope you are doing well,

Yes, there is a way to determine it though it's not a single built-in "assignment timestamp," it can be deduced using logs and activity data.

Azure Activity Logs

You can check Activity Logs in Azure to track when the AVD VM was assigned (provisioned or registered) to a specific user.

Go to Azure Portal > Monitor > Activity Log

Filter by:

Resource type: "Microsoft.DesktopVirtualization"

  **Operation name**: Look for operations like `Create session host`, `Assign user to personal desktop`, or related provisioning activity.
  
     **Initiated by**: Could show the user or admin account that triggered the action.

These logs are retained for 90 days by default, unless exported.

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

Jorge Garza 5

We found a log of the action of assignment under activity log as mentioned, however it does not contains any info related to assignation, if I do multiple modification to same machine, in the logs will show same summary and inside json info it does not mention too.
Could you provide how to get that one you mentioned?
Thank you...

User's image

Inside JSON info of that log we got this:
{

"authorization": {

    "action": "Microsoft.DesktopVirtualization/hostpools/sessionhosts/write",

    "scope": "/subscriptions/5d56626e-e4dd-498a-a414-97f4ad5fb0b0/resourcegroups/xxxxxx-rg-001/providers/Microsoft.DesktopVirtualization/hostpools/sshp-001/sessionhosts/avdssdxxxx-0"

},

"caller": "JG@domain",

"channels": "Operation",

"claims": {

    "aud": "https://management.core.windows.net/",

    "iss": "https://sts.windows.net/19cae55b-6746-45bc-bf60-bd67fe6d75a8/",

    "iat": "1750273460",

    "nbf": "1750273460",

    "exp": "1750277638",

    "http://schemas.microsoft.com/claims/authnclassreference": "1",

    "acrs": "p1",

    "aio": "AaQAW/8ZAAAAOXKm9b97txeHqHehcAcvxv1PALTw5TL/YZvKk+Qt6K5KQX3HoIwWzSvnQK0FPkpDClUbkj9+hW07RSAKnQjnsqwG781NgOplyU4dUrkr2dbRdmdPTvOj44RgdwEQ1+vRjgIW7FidfuM5DRBqOT2/tTb/TjG0UfcVVjSgnM0hZWSQsy/s8/DxDJtpPqGTY5YDGAQy1ggCgx6KYYV2h8i+6A==",

    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,rsa,mfa",

    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",

    "appidacr": "0",

    "http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier": "6aede34a-a979-4dae-8282-3cd5e6b58e26",

    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Garza",

    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Jorge",

    "groups": "1787e1c1-ae6c-4bad-9fd2-6a0b6aedc2ef,616a6663-16ed-4eb6-9210-f19cccd2894c,dc840663-bc89-4ffa-92a7-e461f93c0855,75e97184-0b40-49fd-b0b0-d52fa21237c7,f3619405-46bf-41cb-8f59-d792ab2016b2,d2a34396-c395-405f-8072-cfa936ba7735,bba27302-df84-4066-866b-5f5c514e08c6,36308d9c-f592-4686-a6dd-300f689c6423,7a06f3a5-8819-48d7-908d-93ed89185255,6c11ea66-dbf0-4c43-842f-4a959d80c518,ebbf069b-c144-4d4e-b66b-baf4e7bb1ab8,f885ac49-2a5a-4fb2-bda3-59065d73af8a,194d2e5c-7d66-4d29-963e-b39ee9791fd5,231cba1c-fe69-4ef7-b1d7-c520feee3d50,169ad552-88e4-404d-bc67-b5c07f3bbf9a,b15cd86f-975d-41dc-acc3-f5f186869fcf,a5ceccc5-783c-45eb-b327-9295993c5c32,7641d052-8b78-49aa-a63d-c549cd628a30,880c6102-cc15-4fd7-a2d7-baa29787b781,187cc8ab-bc47-43e3-ad52-ef2e8b1af9e0,068d1d40-05ff-494b-8173-c4df8dd3aff8,391659e8-9b65-478c-9bbd-e85744c17535,bcbfec25-0624-4610-8bce-2a301cf293e5,4685ad7d-be63-4e7d-b5fe-aee944a45571,7a7a4a70-2fe8-4f1a-a18d-7b8362a589f9,93b97198-ca57-4fbd-b235-d179bfad50c9,79be7c75-ee08-4be2-863f-68135a45dd82,212ea856-f900-41d9-8f03-ce6191eac7e8,ceee3ce0-50a9-4275-8d7b-ceb0cb28cc9f",

    "idtyp": "user",

    "ipaddr": "172.100.100.42",

    "name": "Garza, Jorge",

    "http://schemas.microsoft.com/identity/claims/objectidentifier": "00426ae0-470e-4f1e-aa3d-2eb6a4c27d2c",

    "onprem_sid": "S-1-5-21-1454471165-789336058-725345543-80438",

    "puid": "100320032B05EBBB",

    "rh": "1.AVgAW-XKGUZnvEW_YL1n_m11qEZIf3kAutdPukPawfj2MBNYANBYAA.",

    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",

    "sid": "005e5489-c405-d562-38ae-ad062904d46c",

    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "MGnnh-KKjVAQ67xmPNqsfjCViWsaow7l3tvX0uPW53U",

    "http://schemas.microsoft.com/identity/claims/tenantid": "19cae55b-6746-45bc-bf60-bd67fe6d75a8",

    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "JG@domain",

    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "JG@domain",

    "uti": "g9i9cBVwR0a17-kUmC9eAA",

    "ver": "1.0",

    "wids": "f2ef992c-3afb-46b9-b7cf-a126ee74c451",

    "xms_ftd": "cW9FaH8tIMlf-SMkMHNGAfG4Ir_kEUJMqBBAcdo7gxABdXNub3J0aC1kc21z",

    "xms_idrel": "28 1",

    "xms_tcdt": "1441739105"

},

"correlationId": "4c140f5d-ffd3-4cc7-ac58-4707488cb6b1",

"description": "",

"eventDataId": "720993e9-03f5-40e9-9d45-efa7fb85fdc2",

"eventName": {

    "value": "EndRequest",

    "localizedValue": "End request"

},

"category": {

    "value": "Administrative",

    "localizedValue": "Administrative"

},

"eventTimestamp": "2025-06-18T20:02:04.0344344Z",

"id": "/subscriptions/5d56626e-e4dd-498a-1111-97f4ad5fb0b0/resourcegroups/xxx-rg-001/providers/Microsoft.DesktopVirtualization/hostpools/sshp-001/sessionhosts/avdssxxxx-0/events/720993e9-03f5-40e9-9d45-efa7fb85fdc2/ticks/638858737240344344",

"level": "Informational",

"operationId": "22596250-940f-4096-90df-b9bd431fb933",

"operationName": {

    "value": "Microsoft.DesktopVirtualization/hostpools/sessionhosts/write",

    "localizedValue": "Write hostpools/sessionhosts"

},

"resourceGroupName": "avd-rg-001",

"resourceProviderName": {

    "value": "Microsoft.DesktopVirtualization",

    "localizedValue": "Microsoft.DesktopVirtualization"

},

"resourceType": {

    "value": "Microsoft.DesktopVirtualization/hostpools/sessionhosts",

    "localizedValue": "Microsoft.DesktopVirtualization/hostpools/sessionhosts"

},

"resourceId": "/subscriptions/5d56626e-e4dd-498a-1111-97f4ad5fb0b0/resourcegroups/avd-rg-001/providers/Microsoft.DesktopVirtualization/hostpools/sshp-001/sessionhosts/avdssxxxx-0",

"status": {

    "value": "Succeeded",

    "localizedValue": "Succeeded"

},

"subStatus": {

    "value": "OK",

    "localizedValue": "OK (HTTP Status Code: 200)"

},

"submissionTimestamp": "2025-06-18T20:04:26Z",

"subscriptionId": "5d56626e-e4dd-498a-a414-97f4ad5fb0b0",

"tenantId": "19cae55b-6746-45bc-bf60-bd67fe6d75a8",

"properties": {

    "statusCode": "OK",

    "serviceRequestId": null,

    "eventCategory": "Administrative",

    "entity": "/subscriptions/5d56626e-1111-498a-a414-97f4ad5fb0b0/resourcegroups/avd-rg-001/providers/Microsoft.DesktopVirtualization/hostpools/sshp-001/sessionhosts/avdssxxxx-0",

    "message": "Microsoft.DesktopVirtualization/hostpools/sessionhosts/write",

    "hierarchy": "19cae55b-6746-45bc-bf60-bd67fe6d75a8/xx-ROOT/xx-LANDINGZONES/xx-PROD/5d56626e-1111-498a-a414-97f4ad5fb0b0"

},

"relatedEvents": []

}

Share via

Get when a personal AVD was assigned to an user.

1 answer

Your answer