Delete Role Assignment

Copper Contributor

Hi All,

We have received an Azure activity logs in which the Operation Name is Delete role assignment and the Event initiated by is MS-PIM.

In which case the role is deleted by "MS-PIM" and what's the reason for deletion.

 

and also,

 

When we tried to fetch the logs through Log Analytics the Caller was some hexadecimal string, so is there a way to resolve that to the user name with log analytics query.

0 Replies