Forum Discussion

Brass Contributor

Apr 21, 2020

Solved

How to find out who created a form

someone created a MS Form and embeded it on a sharepoint online page. The form is giving an error now but no one knows who created it and I can only find the URL to the form, nothing else. How do I ...

microsoft forms

toszypul
Jan 03, 2022
Jason_B1025 I was able to get the ID of the user with a bit of a hack. Here are sample steps:

-Access the form using this designer direct URL https://forms.office.com/Pages/DesignPage.aspx?origin=shell#FormId=<YourFormID>

-Inspect the network traces. You will find a request similar to this

https://forms.office.com/formapi/api/72f988bf-86f1-41af-91ab-2d7cd011db47/users/e5351c57-d147-418e-89ab-3a3d50c235b6/light/forms('v4j5cvGGr0GRqy180BHbR1ccNeVH0Y5Bias6PVDCNbZUOUg4TkZJUEswSVQ1ODhNNkpHVVlMMldPTi4u')?$select=id,...

-The ID in bold is the AAD ID of the user
-Use Graph Explorer - Microsoft Graph to run this request to retrieve the username and email address of the owner https://graph.microsoft.com/v1.0/users/<UserID>

solman2k

Copper Contributor

Dec 02, 2022

Hello, I'm feeling a little stymied in attempting to make headway with your advice here. I'm not exactly a noobie when it comes to network traces but it has not been part of my tool box for some time. I've tried WPA and Wireshark and simply not finding anything that corresponds to the request as mentioned in your response. Hopefully you or someone else viewing this thread might provided some additional details as to process and tools used if they have been successful in gathering an owner or group GUID following this routine. Thanks in advance for any assistance.

Gary Schultz

Iron Contributor

Oct 10, 2023

solman2k Same here, I'm not finding /formapi/api in the network trace.

solman2k
Copper Contributor
Oct 10, 2023
Gary Schultz Actually ever since determining that the F12 Developer tool in either Chrome or Edge was the easiest option to obtain a network trace that should track an event with the described information that would contain either a user or group that "owns" a Form, toszypul 's procedure described in earlier post has worked as described 99% of the time.