Forum Discussion

jahongir abdurahmonov's avatar
jahongir abdurahmonov
Brass Contributor
May 30, 2023

How to find who invited 'guest' users to our tenant?

I think last time this question was asked here two years ago. And now I wonder if it is possible to find out who invited a particular 'guest' user to our tenant?

  • jahongir abdurahmonov you can find out who invited guests to your tenant from your Azure Active Directory portal, navigate to audit logs and filter by service " invited users" and look at the initiated by (actor).

     

     

    Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.

    ā€ƒ

     

  • jahongir abdurahmonov you can find out who invited guests to your tenant from your Azure Active Directory portal, navigate to audit logs and filter by service " invited users" and look at the initiated by (actor).

     

     

    Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.

    ā€ƒ

     

    • ZNJ3026's avatar
      ZNJ3026
      Copper Contributor

      eliekarkafy What about beyond 30 days?  Is that data point logged permanently somewhere?  This is really great for the 30-day window though.

      • CHARBELNEMNOM's avatar
        CHARBELNEMNOM
        Brass Contributor

        Hello ZNJ3026, beyond 30 days, you need to enable Diagnostic Settings in Microsoft Entra ID and send the logs to Azure Monitor (Log Analytics workspace) with the desired data retention range set at the Log Analytics workspace level or at the Table level (AuditLogs).
        You can find more info documented in this guide.
        If you already have Microsoft Sentinel enabled, you could receive 90 days of log retention for free.
        Hope it helps!

Resources