Forum Discussion
Solved
Identify which user deleted an O365 group?
We recently had a group go AWOL, and though we were able to dig it up thanks to Restore-AzureADMSDeletedDirectoryObject, we are not able to identify how the group was deleted. Is there a way to pull ...
AzureAD's audit logs should show who deleted a group.
To identify who deleted the M365 Group, you can open the group in Microsoft Entra and then access the Audit logs.
This is the best answer. After struggling with audit searches, I checked the group in Entra ID and clicked on Audit Logs and it clearly showed who deleted it.
