Log all activities (outside of AAD)
When assigning Global-Admin Roles it would be very helpful if also Events are logged that are not in AAD for example when the Admin changes something in Intune etc.
We’ve had feedback from customers they want to use Azure Monitor or Sentinel for this. We send all our events to the Azure AD Audit log. These events can be sent to Azure Monitor and Sentinel. Does this solve the ask?