Forum Discussion
Solved
How to get who created M365 Group using PowerShell?
How do we find who created M365 group using PowerShell? Graph API?
- Hello Bhashwar1450
You can get that using the GUI and powershell
https://compliance.microsoft.com > Audit > Search > Azure AD group administration activities > Added a group
https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide
Powershell
Search-UnifiedAuditLog
https://docs.microsoft.com/en-us/powershell/module/exchange/search-unifiedauditlog?view=exchange-ps
Azure AD audit logs
https://aad.portal.azure.com/ >Azure active directory > Audit log >
Hello Bhashwar1450
You can get that using the GUI and powershell
https://compliance.microsoft.com > Audit > Search > Azure AD group administration activities > Added a group
https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide
Powershell
Search-UnifiedAuditLog
https://docs.microsoft.com/en-us/powershell/module/exchange/search-unifiedauditlog?view=exchange-ps
Azure AD audit logs
https://aad.portal.azure.com/ >Azure active directory > Audit log >
You can get that using the GUI and powershell
https://compliance.microsoft.com > Audit > Search > Azure AD group administration activities > Added a group
https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide
Powershell
Search-UnifiedAuditLog
https://docs.microsoft.com/en-us/powershell/module/exchange/search-unifiedauditlog?view=exchange-ps
Azure AD audit logs
https://aad.portal.azure.com/ >Azure active directory > Audit log >
Thank you for the reply EmekaNgene
We were looking to automate the process and therefore cannot use accounts to authenticate as it will be PIM enabled.
