Forum Discussion
Licensing information - differences between Audit Logs and Azure AD
Hi,
I developed a powershell script to extract the licensing attribution and removal (Office 365). I'm using the cmdlet "Seach-UnifiedAuditLog" to extract all events with the operation "Change user license". I'm evaluating if the script is running fine, so I've told our Helpdesk to tell me when they attribute or remove a license, so I could run the script and check.
Based on this I've found something odd, there are some cases where I can see on Azure AD Audit Log for that user that the license has been attributed, like this:
But this specific user does not show up on the Audit Log. I've also tried to search the Audit Log manually, and the result is the same, this license attribution doesn't show up there.
Anyone knows what am I missing here? Shouldn't both platforms give the same data?
Thanks