SOLVED

Licenses - "Who Assigned This License" Report

%3CLINGO-SUB%20id%3D%22lingo-sub-1180401%22%20slang%3D%22en-US%22%3ELicenses%20-%20%22Who%20Assigned%20This%20License%22%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1180401%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20just%20wondering%20if%20a%20report%2Fview%20can%20be%20run%20to%20%3CU%3Esee%20which%20Admin%20assigns%20licenses%3C%2FU%3E.%3C%2FP%3E%3CP%3EI%20tried%20researching%20this%20but%20can't%20find%20anything%20-%20I%20can%20only%20find%20%22how%20to%20assign%22%20licenses%2C%20not%20%22which%20admin%20assigns%20licenses%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExample%20-%20%3CSTRONG%3E10%2F10%20E3%20licenses%20are%20used.%20I%20want%20to%20find%20out%20which%20Admin%20assigned%20those%2010%20licenses.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EMike%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1180401%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1180509%22%20slang%3D%22en-US%22%3ERe%3A%20Licenses%20-%20%22Who%20Assigned%20This%20License%22%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1180509%22%20slang%3D%22en-US%22%3EAFAIK%20you%20should%20be%20able%20to%20see%20this%20in%20the%20Azure%20AD%20audit%20logs%20or%20the%20unified%20audit%20log%20in%20the%20Office%20365%20security%20and%20compliance%20centre%20-%20see%20here%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Freports-monitoring%2Fconcept-audit-logs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Freports-monitoring%2Fconcept-audit-logs%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EOnly%20issue%20is%20that%20these%20logs%20only%20exist%20for%20a%20finite%20time%20and%20if%20you%20want%20to%20keep%20them%20for%20a%20long%20time%20you%20have%20to%20export%20them%20periodically%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20question%20and%20you%20can%20find%20what%20you%20are%20looking%20for%20in%20these%20two%20logs%3CBR%20%2F%3E%3CBR%20%2F%3ELet%20me%20know%20how%20you%20get%20on!%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1180515%22%20slang%3D%22en-US%22%3ERe%3A%20Licenses%20-%20%22Who%20Assigned%20This%20License%22%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1180515%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F562353%22%20target%3D%22_blank%22%3E%40McGregor_Mike%3C%2FA%3E%26nbsp%3B-%20Use%20Audit%20Log%20Search%20under%20Security%20and%20Compliance.%20Within%20Audit%20Log%20Search%20use%20Change%20user%20license%20activity%20under%20User%20management.%20It%20might%20not%20give%20you%20the%20details%20on%20what%20license%20is%20changed%2C%20but%20it%20might%20give%20you%20who%20performed%20a%20license%20change%20during%20a%20certain%20time%20to%20a%20certain%20user.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1180605%22%20slang%3D%22en-US%22%3ERe%3A%20Licenses%20-%20%22Who%20Assigned%20This%20License%22%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1180605%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F53659%22%20target%3D%22_blank%22%3E%40Sai%20Gutta%3C%2FA%3EThank%20you.%20I%20found%20the%20place%20where%20they%20would%20be%20but%20it%20looks%20like%20I%20do%20not%20have%20full%20access%20to%20pull%20audit%20reports.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20the%20information%20though!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1180602%22%20slang%3D%22en-US%22%3ERe%3A%20Licenses%20-%20%22Who%20Assigned%20This%20License%22%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1180602%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20the%20response.%3C%2FP%3E%3CP%3EI%20dug%20deeper%20and%20it%20looks%20like%20I%20don't%20have%20any%20access%20to%20pull%20audit%20reports.%20I%20will%20reach%20out%20to%20my%20manager.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

EDIT:

I found where you would pull audit reports but it doesn't look like I have access to pull them.

Thank you all.

 

 

Hello all,

 

I was just wondering if a report/view can be run to see which Admin assigns licenses.

I tried researching this but can't find anything - I can only find "how to assign" licenses, not "which admin assigns licenses".

 

Example - 10/10 E3 licenses are used. I want to find out which Admin assigned those 10 licenses.

 

Thanks!

 

Regards,

Mike

4 Replies
Highlighted
Solution
AFAIK you should be able to see this in the Azure AD audit logs or the unified audit log in the Office 365 security and compliance centre - see here

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-audit-logs

Only issue is that these logs only exist for a finite time and if you want to keep them for a long time you have to export them periodically

Hope that answers your question and you can find what you are looking for in these two logs

Let me know how you get on!

Best, Chris
Highlighted

@McGregor_Mike - Use Audit Log Search under Security and Compliance. Within Audit Log Search use Change user license activity under User management. It might not give you the details on what license is changed, but it might give you who performed a license change during a certain time to a certain user.

Highlighted

Thank you for the response.

I dug deeper and it looks like I don't have any access to pull audit reports. I will reach out to my manager.

 

Thanks!

Highlighted

@Sai GuttaThank you. I found the place where they would be but it looks like I do not have full access to pull audit reports.

 

Thanks for the information though!