Forum Discussion

Marvin Oco's avatar
Marvin Oco
Steel Contributor
Jul 02, 2020

Microsoft 365 Admin visibility for Guest Users Activity

Is there a way for Admin to have granular visibility for guest users in M365 tenant?

 

- who added the guest user

- what data can the guest access

- when the guest was added

- which group the guest is a member of

- mail notifications to admin that a guest was added

- Audit logs of all guest activity

 

thanks

 

2 Replies

  • Thijs Lecomte's avatar
    Thijs Lecomte
    Bronze Contributor
    There are like 7/8 different ways to invite a guest and depending on the used method, the logs will be in a different place.

    You should look into AAD logs and the Unified Audit Log.

    For notifications I would look into MCAS or Sentinel.

    The group membership of a guest should be done through a custom script
  • Marvin Oco Hey, as far as I know you'll need to use the SCC to search the unified audit log.

     

    https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide