Forum Discussion

Darryl Felstead's avatar
Darryl Felstead
Copper Contributor
Jun 12, 2017
Solved

Identify which user deleted an O365 group?

We recently had a group go AWOL, and though we were able to dig it up thanks to Restore-AzureADMSDeletedDirectoryObject, we are not able to identify how the group was deleted. Is there a way to pull ...
Office 365 Groups
  • Steven Collier's avatar
    Steven Collier
    Jun 12, 2017

    AzureAD's audit logs should show who deleted a group.

Darryl Felstead's avatar
Darryl Felstead
Copper Contributor
Jun 12, 2017
Answered my own question after poking around this morning. Use the Audit Log Search from the "Security & Compliance" section of the admin console.

Resources