Forum Discussion
How to find who invited 'guest' users to our tenant?
alwaysLearner you can find out who invited guests to your tenant from your Azure Active Directory portal, navigate to audit logs and filter by service " invited users" and look at the initiated by (actor).
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.
elieelkarkafi What about beyond 30 days? Is that data point logged permanently somewhere? This is really great for the 30-day window though.
Hello ZNJ3026, beyond 30 days, you need to enable Diagnostic Settings in Microsoft Entra ID and send the logs to Azure Monitor (Log Analytics workspace) with the desired data retention range set at the Log Analytics workspace level or at the Table level (AuditLogs).
You can find more info documented in this guide.
If you already have Microsoft Sentinel enabled, you could receive 90 days of log retention for free.
Hope it helps!