Forum Discussion

Jason_B1025's avatar
Jason_B1025
Brass Contributor
Apr 21, 2020

How to find out who created a form

someone created a MS Form and embeded it on a sharepoint online page. The form is giving an error now but no one knows who created it and I can only find the URL to the form, nothing else. How do I ...
microsoft forms
toszypul's avatar
toszypul
Icon for Microsoft rankMicrosoft

Jason_B1025 I was able to get the ID of the user with a bit of a hack. Here are sample steps:

-Access the form using this designer direct URL https://forms.office.com/Pages/DesignPage.aspx?origin=shell#FormId=<YourFormID>

-Inspect the network traces. You will find a request similar to this 

https://forms.office.com/formapi/api/72f988bf-86f1-41af-91ab-2d7cd011db47/users/e5351c57-d147-418e-89ab-3a3d50c235b6/light/forms('v4j5cvGGr0GRqy180BHbR1ccNeVH0Y5Bias6PVDCNbZUOUg4TkZJUEswSVQ1ODhNNkpHVVlMMldPTi4u')?$select=id,... 

-The ID in bold is the AAD ID of the user
-Use Graph Explorer - Microsoft Graph to run this request to retrieve the username and email address of the owner https://graph.microsoft.com/v1.0/users/<UserID>

solman2k's avatar
solman2k
Copper Contributor
Dec 02, 2022
Hello, I'm feeling a little stymied in attempting to make headway with your advice here. I'm not exactly a noobie when it comes to network traces but it has not been part of my tool box for some time. I've tried WPA and Wireshark and simply not finding anything that corresponds to the request as mentioned in your response. Hopefully you or someone else viewing this thread might provided some additional details as to process and tools used if they have been successful in gathering an owner or group GUID following this routine. Thanks in advance for any assistance.
  • JoshM's avatar
    JoshM
    Copper Contributor
    Dec 02, 2022

    solman2k 

     

    I just used Edge (Chromium) developer tools, open the network section of this, paste in the url to the form and hit enter. Once the page fails to load, look through the request, if you don't have access you'll see a red 403 error. In this request you should see the form ID/users/USERID

    That userID is the AzureAD object ID so you can use it to work out who owns the form. I've uploaded a screenshot that will hopefully help. 

     

     

    • solman2k's avatar
      solman2k
      Copper Contributor
      Dec 02, 2022
      Thanks Josh.

      That worked.
    • Gurltaz's avatar
      Gurltaz
      Copper Contributor
      Dec 12, 2022

      JoshM I have tried used Edge developer tools, open the network section of this, paste in the url to the form and hit enter. But, how can I do it if I can see a 401 error only?? 

  • Gary Schultz's avatar
    Gary Schultz
    Iron Contributor
    Oct 10, 2023

    solman2k Same here, I'm not finding /formapi/api in the network trace. 

    • solman2k's avatar
      solman2k
      Copper Contributor
      Oct 10, 2023

      Gary Schultz Actually ever since determining that the F12 Developer tool in either Chrome or Edge was the easiest option to obtain a network trace that should track an event with the described information that would contain either a user or group that "owns" a Form, toszypul 's procedure described in earlier post has worked as described 99% of the time.

Resources