1

Is there a way using powershell or Graph API to obtain information about the user who created or registered an application in Azure AD?

Rajat
  • 57
  • 3
  • 9

1 Answers1

1
https://graph.microsoft.com/v1.0/auditLogs/directoryAudits?&$filter=activityDisplayName eq 'Add application' and targetResources/any(c:c/id eq 'application object id').

Then look at the intitedBy property in the response.

Chauncy Zhou
  • 1,010
  • 1
  • 5
  • 10
  • 1
    It won't give me the information about the user who has registered the application in Azure AD. This API will give owner information of the application which can be different from the actual user who created/registered the app in Azure AD – Rajat Dec 04 '20 at 07:14
  • @Rajat sorry,I don't see your problem too well...,i have update my answer.:) – Chauncy Zhou Dec 04 '20 at 07:21
  • Thanks Zhou, this helps. Just wanted to confirm, by default we can get the audit logs for last 30 days only, correct. So with this API will get result of only those apps that got created in last 30 days and not before that date. Correct? – Rajat Dec 04 '20 at 11:58
  • @Rajat Yes. This API can only access the data that has not expired. – Allen Wu Dec 07 '20 at 02:22
  • So, is there any other alternative to achieve it? – Senior Systems Engineer Sep 06 '22 at 06:13