This how‑to explains how to track and identify who updated a user's license in CoreView, even if the change occurred outside the CoreView app.
- Navigate to “Audit” in the side panel menu and select “Azure AD > Azure AD activities”.
- From the columns option select “Modified properties” to see details of the operation. You can also select any other columns based on your requirements.
- Click “Apply” to save changes.
Key columns:
- Operation: this column indicates the type of operation performed. For example, if the operation involved changing the user's license, you will see “Change user license”.
- User Id: this column displays the user who executed the operation.
- Object Id: this column identifies the user on whom the operation was performed.
- Modified properties: this column provides the specifics of the operation, detailing what exactly has been altered. Please note that we don’t make any modifications to the data presented. What you see in Microsoft, you'll find mirrored in CoreView.
To track any changes made to licenses, you'll need to refer to the “Update user” activity, not the “Change User License” operation. The “Modified properties” section of the “Update user” operation will display the specific license that was altered.
