How to Get Group Audit Report in Microsoft 365

As an admin, knowing who created a Microsoft 365 group helps you keep things tidy and avoid too many groups cluttering up your space.

To find a user who created a Microsoft 365 group, you can simply follow the steps below.

• Login to the Microsoft 365 admin center.
• Go to 'Active Teams & groups' under the 'Teams & groups' section.
• Select the Microsoft 365 group you're interested in.
• Look for the 'Other info' section in the 'General' tab.
• Here, you'll see the date and time the group was created, who created it, and the portal through which it was created.

• Navigate to Audit»Azure AD»Group Audit»Created Groups report.
• Additionally, the 'Created by' filter within the report simplifies the process further, allowing you to easily sort and view groups created by a specific user.

Here's a handy tip: Once you've set your filters, you can save them as your own custom view. This way, you won't have to set up the filters again every time. Plus, if you need the information locally or in your inbox, you can easily export the report into a CSV file.

Microsoft 365 group-based licensing lets admins assign licenses to a group, and group members will automatically inherit the licenses. However, tracking changes to group licenses, such as additions and removals, can be difficult, which leads to compliance issues and inefficiencies in group license management.

Monitoring group-based license changes is crucial for several reasons:

Unfortunately, Microsoft doesn't provide any straightforward method to view group-based license changes. Thus, it's challenging for admins to track and understand the changes in group license assignments.

• With AdminDroid, you can easily audit the Microsoft 365 Group License Changes report whenever there is a change in the Azure AD group license.
• This report lets admins easily manage group licenses, ensuring accurate and secure allocation of licenses within Microsoft 365 groups.

Here's a quick tip: Tailor your reports to fit your style with AdminDroid's versatile reporting options. Choose from pie charts, donut charts, bar charts, heat maps, or geo maps to match your preferences. Simply click the customize button in the right corner to personalize your reports just the way you like.

As an admin, managing Microsoft 365 group membership is crucial to prevent accidental exposure of sensitive data. Group membership changes can impact data security. So, it's important to control who has membership and access rights within groups.

To add or remove members in groups, you can use the Microsoft 365 admin center.

Managing Microsoft 365 group owners is essential for maintaining data security and oversight. By default, the person who creates a group becomes a group owner.

However, groups may have multiple owners for various reasons, such as backup support. Members can be promoted to owners, and owners can be downgraded to members.

It's crucial to keep a close eye on ownership roles, as groups are often formed through voluntary member addition or invitations by current owners. Admins should monitor Microsoft 365 group owners to boost teamwork, ensure leaders are qualified, adapt to organizational changes, and enhance user engagement.

Also, monitoring ownership changes helps maintain a secure and well-managed collaborative environment.

• AdminDroid offers the Group Owner Changes report under the Group Audit section. This helps you to monitor group ownership and keeps you updated on leadership shifts.

Ensuring a secure working environment within Microsoft 365 is paramount, especially with the increasing integration of guest users into organizational workflows. The addition of guest users can lead to unauthorized access, loss of sensitive information, higher chances of malware attacks, and a lack of control over external access.

Here's why vigilantly monitoring guest user membership is crucial:

Tracking guest memberships in the Microsoft 365 admin center can be complex, involving the review of each guest user's group individually, which can be time-consuming.

Without close monitoring, guest accounts might retain access to sensitive information longer than required, leading to possible security problems or rule violations.

In this guide, you'll discover:

Preventing users from creating groups in Microsoft 365 is crucial for effective group management in larger organizations. Follow these steps to control group creation:

Connect-MgGraph -Scopes "Directory.ReadWrite.All", "Group.Read.All" 
$GroupName = ""
$AllowGroupCreation = "False" 
$settingsObjectID = (Get-MgBetaDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).id
if(!$settingsObjectID)
{
$params = @{
templateId = "62375ab9-6b52-47ed-826b-58e47e0e304b" 
values = @(
@{
name = "EnableMSStandardBlockedWords"
 value = "true"
}
)
}
New-MgBetaDirectorySetting -BodyParameter $params
$settingsObjectID = (Get-MgBetaDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).Id 
}
$groupId = (Get-MgBetaGroup | Where-object {$_.displayname -eq "GroupName"}).Id 
$params = @{
templateId = "62375ab9-6b52-47ed-826b-58e47e0e304b"
values = @(
@{
name = "EnableGroupCreation"
value = $AllowGroupCreation
} 
@{
name = "GroupCreationAllowedGroupId
value = $groupId
) 
} 
Update-MgBetaDirectorySetting -DirectorySettingId $settingsObjectID -BodyParameter
 $params
(Get-MgBetaDirectorySetting -DirectorySettingId $settingsObjectID).Values