Any logs about the changes of the assignments of the Teams user policies?

%3CLINGO-SUB%20id%3D%22lingo-sub-3189301%22%20slang%3D%22en-US%22%3EAny%20logs%20about%20the%20changes%20of%20the%20assignments%20of%20the%20Teams%20user%20policies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3189301%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20place%20where%20I%20can%20find%20log%20files%20about%20changes%20of%20the%20teams%20policies%20and%20assignments%20of%20these%3F%3CBR%20%2F%3EFrom%20time%20to%20time%20there%20are%20assignment%20changes%20of%20policies%20to%20users%20and%20we'd%20like%20to%20find%20out%20who%20or%20which%20app%20initiates%20them.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20don't%20see%20anything%20within%20the%20audit%20log%20%2F%20azure%20logs.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-teams%2Fteams-policy-audit-logs%2Fm-p%2F2291716%22%20target%3D%22_self%22%3EI%20found%20this%20thread%20about%20using%20CASB%3F!%3C%2FA%3E%20(which%20unfortunately%20is%20not%20licensed%20in%20our%20company).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3189301%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAssignment%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELog%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%20Policies%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3189659%22%20slang%3D%22en-US%22%3ERe%3A%20Any%20logs%20about%20the%20changes%20of%20the%20assignments%20of%20the%20Teams%20user%20policies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3189659%22%20slang%3D%22en-US%22%3EHello%2C%20as%20far%20as%20I%20know%20those%20logs%20are%20only%20discoverable%20using%20Microsoft%20Defender%20for%20Cloud%20Apps%20as%20described%20in%20the%20linked%20conversation%2C%20i.e.%20TeamsAdminAction%20under%20Activity%20log.%3C%2FLINGO-BODY%3E
Frequent Contributor

Is there any place where I can find log files about changes of the teams policies and assignments of these?
From time to time there are assignment changes of policies to users and we'd like to find out who or which app initiates them.

I don't see anything within the audit log / azure logs.
I found this thread about using CASB?! (which unfortunately is not licensed in our company).

1 Reply
Hello, as far as I know those logs are only discoverable using Microsoft Defender for Cloud Apps as described in the linked conversation, i.e. TeamsAdminAction under Activity log.