Share via

Kusto query to find external users in the subscriptions

Mohammed Sohel 66 Reputation points
2021-09-06T10:50:44.693+00:00

Hello,

We have multiple subscriptions where some of the users will add external users ( like @Stuff .com or @réalisations .com ) in our tenant.

Do we have any kusto query which can use easily we can use in log analytics to find out who added or where added.

Note : I know about powershell and other command but need help on Kusto query as we already integrated everything.

Early response much appreciated !!

Azure Monitor
Azure Monitor

An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.

0 comments

Answer accepted by question author

SwathiDhanwada-MSFT 19,088 Reputation points Moderator
2021-09-06T12:41:42.1+00:00

@Mohammed Sohel Kindly note users information is not stored in Log Analytics. Only SignInLogs , AuditLogs, NonInteractiveSignInLogs and ServicePrincipalSignInLogs can be enabled using diagnostic settings. To query these logs, this document is listed with such examples. Kindly check and revert if you have any questions.

Was this answer helpful?

1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.