Forum Discussion
Mark121Le
Aug 31, 2020Copper Contributor
AZURE User Access Administrator where can I see the assignment of the role
Looking to identify the assignment of the User Access Administrator role within my subscription's Activity Logs with no luck. I can see the role has been assigned in the azure subscription blade unde...
Peter_Beckendorf
Aug 31, 2020Iron Contributor
Hi Mark121Le,
Maybe try this Query and check if you will find it in the Events coming back:
AuditLogs
// Role Changes in AAD
| where SourceSystem == "Azure AD"
| where OperationName contains "Add member"
| where Category == "RoleManagement"
| where TargetResources != "*"
| where TimeGenerated >= ago(14d)
| project Identity, TimeGenerated, Category, OperationName, Result, AffectedUser = TargetResources.[1].displayName, AffectedRole = TargetResources.[0].modifiedProperties.[1].newValue
| limit 50
| sort by TimeGenerated desc
KInd Regards, Peter