How to Get Group Audit Report in Microsoft 365

Microsoft 365 group-based licensing lets admins assign licenses to a group, and group members will automatically inherit the licenses. However, tracking changes to group licenses, such as additions and removals, can be difficult, which leads to compliance issues and inefficiencies in group license management.

Monitoring group-based license changes is crucial for several reasons:

Unfortunately, Microsoft doesn't provide any straightforward method to view group-based license changes. Thus, it's challenging for admins to track and understand the changes in group license assignments.

• With AdminDroid, you can easily audit the Microsoft 365 Group License Changes report whenever there is a change in the Azure AD group license.
• This report lets admins easily manage group licenses, ensuring accurate and secure allocation of licenses within Microsoft 365 groups.

Here's a quick tip: Tailor your reports to fit your style with AdminDroid's versatile reporting options. Choose from pie charts, donut charts, bar charts, heat maps, or geo maps to match your preferences. Simply click the customize button in the right corner to personalize your reports just the way you like.

As an admin, managing Microsoft 365 group membership is crucial to prevent accidental exposure of sensitive data. Group membership changes can impact data security. So, it's important to control who has membership and access rights within groups.

To add or remove members in groups, you can use the Microsoft 365 admin center.

Managing Microsoft 365 group owners is essential for maintaining data security and oversight. By default, the person who creates a group becomes a group owner.

However, groups may have multiple owners for various reasons, such as backup support. Members can be promoted to owners, and owners can be downgraded to members.

It's crucial to keep a close eye on ownership roles, as groups are often formed through voluntary member addition or invitations by current owners. Admins should monitor Microsoft 365 group owners to boost teamwork, ensure leaders are qualified, adapt to organizational changes, and enhance user engagement.

Also, monitoring ownership changes helps maintain a secure and well-managed collaborative environment.

• AdminDroid offers the Group Owner Changes report under the Group Audit section. This helps you to monitor group ownership and keeps you updated on leadership shifts.

Ensuring a secure working environment within Microsoft 365 is paramount, especially with the increasing integration of guest users into organizational workflows. The addition of guest users can lead to unauthorized access, loss of sensitive information, higher chances of malware attacks, and a lack of control over external access.

Here's why vigilantly monitoring guest user membership is crucial:

Tracking guest memberships in the Microsoft 365 admin center can be complex, involving the review of each guest user's group individually, which can be time-consuming.

Without close monitoring, guest accounts might retain access to sensitive information longer than required, leading to possible security problems or rule violations.

In this guide, you'll discover:

Preventing users from creating groups in Microsoft 365 is crucial for effective group management in larger organizations. Follow these steps to control group creation:

Connect-MgGraph -Scopes "Directory.ReadWrite.All", "Group.Read.All" 
$GroupName = ""
$AllowGroupCreation = "False" 
$settingsObjectID = (Get-MgBetaDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).id
if(!$settingsObjectID)
{
$params = @{
templateId = "62375ab9-6b52-47ed-826b-58e47e0e304b" 
values = @(
@{
name = "EnableMSStandardBlockedWords"
 value = "true"
}
)
}
New-MgBetaDirectorySetting -BodyParameter $params
$settingsObjectID = (Get-MgBetaDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).Id 
}
$groupId = (Get-MgBetaGroup | Where-object {$_.displayname -eq "GroupName"}).Id 
$params = @{
templateId = "62375ab9-6b52-47ed-826b-58e47e0e304b"
values = @(
@{
name = "EnableGroupCreation"
value = $AllowGroupCreation
} 
@{
name = "GroupCreationAllowedGroupId
value = $groupId
) 
} 
Update-MgBetaDirectorySetting -DirectorySettingId $settingsObjectID -BodyParameter
 $params
(Get-MgBetaDirectorySetting -DirectorySettingId $settingsObjectID).Values