Need to know who created an object in O365 Audit logs shows user as "Service Principle" User object created was :

Kit Sarsoza 1 Reputation point
2022-04-12T10:18:25.183+00:00

Need to know who created an object in O365
Audit logs shows user as "Service Principal"
User object created was :

from this article : http://learn.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals#:~:text=A%20service%20principal%20is%20created%20in%20each%20tenant%20where%20the,resources%20the%20app%20can%20access.

This article describes application registration, application objects, and service principals in Azure Active Directory (Azure AD): what they are, how they're used, and how they are related to each other. A multi-tenant example scenario is also presented to illustrate the relationship between an application's application object and corresponding service principal objects.

Follow-up question : How do we know which application was accessed and by whom?
And how can accessing a application create a user object?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,191 questions
{count} votes