How to find out users who activated O365 securelet on CASB console

Products

• CASB Securlet SAAS

Issue/Introduction

CASB admin may want to know which admin user activated O365 securelet on the CASB console.

Environment

O365 securelet on CASB console.

Cause

We do not store the admin user's information who activated the securelet on our backend system.

Resolution

• Login to Azure and go to Enterprise apps.

• Click Office 365 Securlet and then click Assign users and groups.

• Here we can see the listed user as below:

Additional Information

Please note, Azure admin can delete and add users so admin needs to clarify if anyone has manually add this user or it was automatically created during securelet activation. Below is the sample sign in log from Azure, App: Office 365 Securlet and Application ID should match with the Office 365 Securlet's app ID in the enterprise app list.