Check the audit log: https://learn.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide
Or the corresponding Azure AD audit events: https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-audit-logs
Who created Guest external accounts in Azure
Hi,
Is there anyway to know who has created/invited from admins the guest external accounts in Azure. Nothing much can be found over the Internet. We would like to restrict our guest accounts as much as possible so knowing who has created is a start for us. Lot of external guest accounts have permission on Sharepoint and OneDrive contents too. Any leads would be appreciated.
2 answers
Sort by: Most helpful
-
Vasil Michev 113.8K Reputation points MVP
2021-08-10T09:36:05.953+00:00 -
JoyZ 18,086 Reputation points
2021-08-11T05:43:39.937+00:00 Please check the audit logs under the Azure Active Directory menu, you can open the log in the Monitoring section:
Then select the related Activity to see the Initiated by column.(the user who invite the guest user in Azure AD)
Note, you could select the date range or configure a custom timeframe according to your needs:
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.