Microsoft 365 group auditing


I’m trying to create a script to audit all 365 groups, in particular where they were provisioned from.
From the SharePoint active sites page, we can add an extra column called “Created from” which shows what I’m looking for but I can’t find it anywhere. I have several clients with a few hundred groups and at some point it’s unmanageable so I need to address this.
The SharePoint active pages only shows groups with sites so not all are listed but I need a list of all groups, including 365 unified, DL, Security, etc and where they were provisioned from like SP, Teams, Outlook, 365 group, etc.

Does anyone know if there is a way to find this information in a property somewhere? Alternatively, is there a way to assert this information?



That data isn’t retained anywhere (at least not permanently). It will exist in audit logs which is part of the security & compliance console

Have you looked at all into Microsoft graph? It’s possible it’s exposed there in some manner, you may just need to play around with it. Also don’t be afraid to ask MS =).