Kusto query to find external users in the subscriptions

Mohammed Sohel 66 Reputation points
2021-09-06T10:50:44.693+00:00

Hello,

We have multiple subscriptions where some of the users will add external users ( like @Stuff .com or @réalisations .com ) in our tenant.

Do we have any kusto query which can use easily we can use in log analytics to find out who added or where added.

Note : I know about powershell and other command but need help on Kusto query as we already integrated everything.

Early response much appreciated !!

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,935 questions
0 comments No comments
{count} votes

Accepted answer
  1. SwathiDhanwada-MSFT 18,136 Reputation points
    2021-09-06T12:41:42.1+00:00

    @Mohammed Sohel Kindly note users information is not stored in Log Analytics. Only SignInLogs , AuditLogs, NonInteractiveSignInLogs and ServicePrincipalSignInLogs can be enabled using diagnostic settings. To query these logs, this document is listed with such examples. Kindly check and revert if you have any questions.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful