Share via

How to determine who created a resource on Azure?

Abhijit Shrikhande 317 Reputation points
2022-05-26T00:09:51.007+00:00

We are trying to identify the owner of a resource on Azure. Is there a PowerShell query or a REST API that will let me display a resource group or app service along with the owner's name and the date of creation?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,858 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. David Broggy 5,686 Reputation points MVP
    2022-05-26T03:29:36.66+00:00

    Hi @Abhijit Shrikhande
    First of all, you need to get those logs stored in a Log Analytics Workspace.
    They don’t sit around in the graph space so you have to store them somewhere.
    You do this by pointing the diagnostic logs to a Log Analytics Workspace as described here:
    analysis-services-logging

    Once you have the logs stored in a workspace you can open it and use KQL to easily query all Azure activity.

    Even cooler, get into Microsoft Sentinel and learn about SIEMs.

    Also yes you can use powershell and Azure AD commands to search this activity ONCE it’s stored in a log analytics workspace, but the first step it to get it in there.

    Hope that helps!