Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

O365 Audit Log Search User Added to Group

Copper Contributor

I've run a search using the Added member to group under the Azure AD group administration activities section and that does provide some useful output like; who the user is, when the user was added to a group, who added them, etc. but I don't see any indication of which group the user was added to. 

Am I missing something here? 

1 Reply
best response confirmed by brandon wilson (Occasional Reader)
Solution

You will not see the group name from the SCC, if that's what you are after. There's a long standing bug preventing this information from showing. Instead, use the Azure AD logs in the Azure portal: https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Audit

1 best response

Accepted Solutions
best response confirmed by brandon wilson (Occasional Reader)
Solution

You will not see the group name from the SCC, if that's what you are after. There's a long standing bug preventing this information from showing. Instead, use the Azure AD logs in the Azure portal: https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Audit

View solution in original post