Kusto query to find external users in the subscriptions

Question

Hello,

We have multiple subscriptions where some of the users will add external users ( like @Stuff .com or @réalisations .com ) in our tenant.

Do we have any kusto query which can use easily we can use in log analytics to find out who added or where added.

Note : I know about powershell and other command but need help on Kusto query as we already integrated everything.

Early response much appreciated !!

Answer 1

@Mohammed Sohel Kindly note users information is not stored in Log Analytics. Only SignInLogs , AuditLogs, NonInteractiveSignInLogs and ServicePrincipalSignInLogs can be enabled using diagnostic settings. To query these logs, this document is listed with such examples. Kindly check and revert if you have any questions.