Forum Discussion

dmarquesgn's avatar
dmarquesgn
Iron Contributor
Sep 09, 2024

Licensing information - differences between Audit Logs and Azure AD

Hi,

I developed a powershell script to extract the licensing attribution and removal (Office 365). I'm using the cmdlet "Seach-UnifiedAuditLog" to extract all events with the operation "Change user license". I'm evaluating if the script is running fine, so I've told our Helpdesk to tell me when they attribute or remove a license, so I could run the script and check.

Based on this I've found something odd, there are some cases where I can see on Azure AD Audit Log for that user that the license has been attributed, like this:

But this specific user does not show up on the Audit Log. I've also tried to search the Audit Log manually, and the result is the same, this license attribution doesn't show up there.

Anyone knows what am I missing here? Shouldn't both platforms give the same data?

Thanks

No RepliesBe the first to reply

Resources