Teams Admin changes activity log

Question

Hello Teams Community,

Please I need your help on this issue.

Teams External access was somehow changed and I want to see what admin account made that change and when.

Is there a log or PowerShell script that will get me that information?

Answer 1

Hi @IBN ，

Teams External access was somehow changed and I want to see what admin account made that change and when.

Are you referring to the change of the setting below?

If this is the case, based on my test, the data can be retrieved from Audit log assuming the change was made recently(within 90 days):

1. Go to https://compliance.microsoft.com and select Audit.
2. On the Search page, specify the dates(The maximum date range that you can specify is 90 days) and users (you can enter all admin accounts).
3. Click Export to export the results to Excel.
4. Open the the exported file in Excel, add a filter to all columns. In the "AuditData" field, type "TenantFederationSettings" in the search box and click OK, you can go through the filtered results for more details and identify the admin account that made the change:
   
   

More details about retrieving Teams data from the audit log can be found via Search the audit log for events in Microsoft Teams.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.