Mar 14 2018
- last edited on
Feb 19 2021
When I do a search of an audit log in the S&C Center for the Created Site Collection activity, many of the results show a User of app@sharepoint, many other results show real user accounts.
Does anyone know what would cause this activity to be performed by the app@sharepoint account?
Mar 25 2018 02:29 PM
I ran some more tests and determined that when a user creates an a group from Yammer, Outlook or Teams, then the Unified log shows the creation of the Site Collection as being created by email@example.com because this service account is run on behalf of the actual creator.
Jun 22 2021 01:06 PM