Forum Discussion
O365 group deletion audit
I'm trying to find out who deleted a group using security and compliance. When I exported the report it's telling me that the group was "Hard deleted" and the userids of the person who deleted the g...
So I went ahead and searched the logs in my tenant for this "Certificate" object, and I can confirm that it's a Microsoft-owned service principal that runs some processes on the backend.
VasilMichev Great digging. It would be nice if Microsoft starts using user-friendly names for their backend principals!
No argument there, but it is what it is...