Azure settings; where is account used

Question

Hi,

I'm looking for a report that will tell me where (within the settings of Azure) a certain account is used/entered.

Thanks!

Answer 1

Hi Ollie,

If you're looking to find details about authentications with Azure Active Directory Accounts, then the place to see (manually) the details is --> Azure Portal --> Azure Active Directory --> Sign-in Logs.

If you want to have a report, you can make use of the Sign-ins Workbook inside Azure Sentinel.
For this you need to deploy an Azure Sentinel instance and configure to collect the Azure AD Sign-in Logs using the Azure Active Directory Data Connector in Azure Sentinel.
(Be aware that Azure Sentinel will generate costs - pricing details here

I hope it helps!
BR,
George

Answer 2

Hi George,

Thank you for your reply.
I am sure it will help me in other situations but for now it is not quite what I am looking for.

My situation:
We need to disable/delete an Azure-admin account. But need to make sure it has not been used anywhere in any Azure configuration.
So nothing will crash & burn when we actually disable/delete it.

Anyone any ideas?

Thanks!