Forum Discussion
Office 365 Audit for Created Group triggers for non-group creation
In trying to get our Office 365 Groups to stop multiplying like rabbits, I set up an audit alert for "Created Group" under Site Permissions. It is to mainly trap when someone creates a Planner in the...
Victor_Ungureanu
Microsoft
Microsoft1. Created group = Site administrator or owner creates a group for a site, or performs a task that results in a group being created. For example, the first time a user creates a link to share a file, a system group is added to the user's OneDrive for Business site. This event can also be a result of a user creating a link with edit permissions to a shared file.
2. You should look for "Added group"
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance#audited-activities
2. You should look for "Added group"
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance#audited-activities