SOLVED

How to get who created M365 Group using PowerShell?

Copper Contributor

How do we find who created M365 group using PowerShell? Graph API?

2 Replies
best response confirmed by Bhashwar1450 (Copper Contributor)
Solution
Hello @Bhashwar1450

You can get that using the GUI and powershell
https://compliance.microsoft.com > Audit > Search > Azure AD group administration activities > Added a group
https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compl...

Powershell
Search-UnifiedAuditLog
https://docs.microsoft.com/en-us/powershell/module/exchange/search-unifiedauditlog?view=exchange-ps

Azure AD audit logs
https://aad.portal.azure.com/ >Azure active directory > Audit log >

Thank you for the reply @EmekaNgene
We were looking to automate the process and therefore cannot use accounts to authenticate as it will be PIM enabled.

1 best response

Accepted Solutions
best response confirmed by Bhashwar1450 (Copper Contributor)
Solution
Hello @Bhashwar1450

You can get that using the GUI and powershell
https://compliance.microsoft.com > Audit > Search > Azure AD group administration activities > Added a group
https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compl...

Powershell
Search-UnifiedAuditLog
https://docs.microsoft.com/en-us/powershell/module/exchange/search-unifiedauditlog?view=exchange-ps

Azure AD audit logs
https://aad.portal.azure.com/ >Azure active directory > Audit log >

View solution in original post