Avatar of Bastiaan
Flag for Netherlands

asked on 

Microsoft Audit Log shows a wrong user id in log

If we remove users from a Microsoft Team, in the Audit Log a different user who has removed the user is shown. This way we can't be sure who has removed the Teams user. Is this default behaviour, or am I using the 'Users' field wrong? 

Search criteria:


Example given:

Admin A, removes User A from Teams A. In the audit log of Microsoft, we search for removed members in Teams. In the log, it shows that Amin B has removed User A from Teams A.

MicrosoftMicrosoft 365

Avatar of undefined
Last Comment
Vasil Michev (MVP)

8/22/2022 - Mon