Forum Discussion
Auditing Power-Users and Administrative Tasks with non-repudiation - Does it exist?
I am trying to to track down what one would seem to be a seemingly basic task - When and Who created a particular user in AAD? I believe I have been able to answer part of the question, the when. I s...
Did you ever manage to get to the bottom of this?
We have similar instance in our tenant.
Thank You
We have similar instance in our tenant.
Thank You
If it helps anyone else, I finally got an answer on this from MS Support:
if something shows up as Microsoft Substrate Management it means the provisioning was done through automation using a service principal on our end. This typically happens if a user gets created on EXO portal or a Group is created using teams. The Recipient Display Type for this user is set to 18. Which means this is a scheduling mailbox created through Microsoft Bookings. To know more visit https://protect-eu.mimecast.com/s/rPa8Cl2m8uOZNZ8CGuKTp?domain=techcommunity.microsoft.com This explains the behavior on how such users get created.