Complete Lack of Basic Reporting

[adam_motl]

Today I came into work and found I was added to a public, org-wide Team, and added by a new co-worker. The co-worker said they did not create the team or add members. There is no way to confirm or deny this. There were 21 owners of the team and zero results in searching the M365 security audit logs for 'Created team'. We need to track down how and why this was created but there is nothing. Every Team should have, in easy view, the creator of the Team. 

[#2 · Accepted solution]

Hello, perhaps this will narrow it down a bit.

Only global admins can create Org-wide teams that pulls in all users automatically https://docs.microsoft.com/en-us/microsoftteams/create-an-org-wide-team

You can see who has created a team using the admin tools such as https://docs.microsoft.com/en-us/microsoftteams/audit-log-events

You can also manage who can create groups/teams https://docs.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwi...

Finally, all teams do not have that many owners so that's usually the easiest way to see who the creator might be.

[#3]

This is great thank you!