Obtain usernames for file activities reports

REST API events

1. Open the Azure portal. Search for Storage accounts.

   

2. Choose the specific storage account.

   

3. Now, select File shares under the Data storage section and choose a file share from the list.

   

4. On the left menu, click Browse. The Authentication method should be set to Microsoft Entra user account.

   

SMB events

For SMB events, follow these steps to enable identity access for the necessary storage account in the Azure portal and to add the configured domain to ADAudit Plus.

To enable identity access for the necessary storage account in the Azure portal:

1. Open the Azure portal.
2. In the search bar at the top, search for Storage accounts and select it from the search results.

   

3. Choose the specific storage account.

   

4. Now, select File shares under the Data storage section.

   

5. Under File share settings, click the Not configured option.

   

6. Under Step 1, select Microsoft Entra Domain Services and click Set up.

   

7. Check the corresponding box to enable Microsoft Entra Domain Services and save your settings.

   

8. Under Step 2, select Enable permissions for all authenticated users and groups and choose the appropriate role from the drop-down based on your needs.

   

9. Click Save to apply the changes. You will receive a notification in the top-right corner stating, "Successfully updated storage account."

To add the configured domain to ADAudit Plus:

1. Log in to the ADAudit Plus web console.
2. Click Domain Settings in the top-right corner, then click + Add Domain.
3. Enter the Domain Name of the domain that is configured as the identity source for the storage account.
4. Select On-premises Active Directory as your Domain Type.
5. Check Authentication and enter your credentials.
6. Select Click here to discover Domain Controllers.
7. Specify the name of your domain controller.

   

8. Click Save.