Account was added as owner to a group by Viva Engage?

JvD 20 Reputation points
2024-12-16T15:08:02.3466667+00:00

We were alerted to a change being done on the Entra user database for the breakglass accounts we created dated the 10th of December, which had those breakglass accounts added as an owner to a group. The group seems to apparently be the Viva Engage (yammer) group of what I've found, tho the audit log only lists the group ID, and leaves the displayname and user principal name completely empty.

Said group is not listed in EntraID that I could see, so unsure what it actually is. If I track the Object ID as a group, I end up with a group 'All Company'...which is also one I see popping up in Viva Engage if I actually look at that for management at https://engage.cloud.microsoft/.

Looking at the owners for the group, I find basically all high-level admins existing in EntraID have been added as owner to that group.

Looking at the audit logs, it's shown the actor initiating this change is listed as 'Viva Engage', which is listed as an 'application'.

We're not actively doing anything to implement Viva Engage, nor have we actually done anything with it.

While the membership as an owner isn't really a bad thing for the users, we're puzzled as to where this change came from and who (or what) initiated it and why.

At this point we're thinking it's a change Microsoft has done to provide for further changes made to their Viva Engage thing which may require that right in the future, but we're lookin to get some confirmation of that change actually originating at Microsoft.

Is anyone willing to hazard a guess here, or point me at portions I might look at for more information?

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
10,607 questions
Microsoft Viva
Microsoft Viva
A Microsoft employee experience platform built on Microsoft 365 that brings together communications, knowledge, learning, resources, and insights.
87 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,741 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 111.3K Reputation points MVP
    2024-12-16T17:10:51.12+00:00

    IIRC, all global admins are added as owners to the "All Company" group, which is done by an automated background process. I can confirm the same behavior is some of my test tenants, so it's nothing to worry about.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.