AAD provisioning does not show Audit logs for group membership
AAD and G suite provisioning does not show Audit logs for group membership update which is I believe quite important to know. As per MS agent :
If the user is not provisioned already on G suite, when we try to update group membership, this would obviously fail since we don't have a reference attribute to resolve on the target. Currently, by design, Azure AD doesn't retry the previously failed group membership update after the user is provisioned. Workarounds to fix this problem is to remove and re-add the user as a member of the group or trigger a clear current state from the portal.
It should try again and provide some logs for visibility that what AAD is doing. There is no logs currently and MS engineer asked me to provide feedback here.