Forum Discussion
Solved
Complete Lack of Basic Reporting
Today I came into work and found I was added to a public, org-wide Team, and added by a new co-worker. The co-worker said they did not create the team or add members. There is no way to confirm or deny this. There were 21 owners of the team and zero results in searching the M365 security audit logs for 'Created team'. We need to track down how and why this was created but there is nothing. Every Team should have, in easy view, the creator of the Team.
- Hello, perhaps this will narrow it down a bit.
Only global admins can create Org-wide teams that pulls in all users automatically https://docs.microsoft.com/en-us/microsoftteams/create-an-org-wide-team
You can see who has created a team using the admin tools such as https://docs.microsoft.com/en-us/microsoftteams/audit-log-events
You can also manage who can create groups/teams https://docs.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide
Finally, all teams do not have that many owners so that's usually the easiest way to see who the creator might be.
2 Replies
- Hello, perhaps this will narrow it down a bit.
Only global admins can create Org-wide teams that pulls in all users automatically https://docs.microsoft.com/en-us/microsoftteams/create-an-org-wide-team
You can see who has created a team using the admin tools such as https://docs.microsoft.com/en-us/microsoftteams/audit-log-events
You can also manage who can create groups/teams https://docs.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide
Finally, all teams do not have that many owners so that's usually the easiest way to see who the creator might be.- This is great thank you!
