CODEWITHSUNDEEP
azurepowershellazure-active-directory
T.Radius
T.Radius

Reputation: 63

Azure powershell : Find the creator of a user, principal, application and group in Azure AD



I want to find the creator of a given group, user, principal and application in azure active directory (ad), this is using a powershell command or an api that can return this type of information.

Any help please
Many thanks in advance

Upvotes: 1

Views: 5183

Answers (1)

Rick Rainey
Rick Rainey

Reputation: 11246

You need to use the Azure AD Audit Logs to find this kind of information. To my knowledge, there are not any PowerShell Cmdlets that allow you to query for this. Instead, you have to use the Microsoft Graph API, which technically you could call from PowerShell if you wanted to.

Alternatively, you could export the audit log to blob storage (JSON format), and then use PowerShell to query the logs from there.

Upvotes: 2

Related Questions