Voted Best Answer
Aug 08, 2017 - 04:50 AM
Personally, I would "skin the cat" a different way.
Generally, I would control O365 it via LDAP Security Groups and then perform the queries from these rather than the O365 admin portal. You could setup a a periodic query of those on a daily, weekly, or monthl;y basis fairly easily. I've only seen this implementation when folks have Azure hosting part of their AD but fairly certain it'll also work for on-prem.
Now, I know that isn't answering your question... but consider a few things: (1) upstream controls are far better than downstream controls, and (2) the reporting should only be for auditing. Now, if you are auditing I would take 2 snapshots (from LDAP groups) and compare rather than going directly to O365 admin portal... It will be far easier in IMHO.
PS This is the same issue that occures on Adobe Cloud all the time... how do you contorl and how do you report.... my solution is always LDAP and put that in your contract/agreement with the publisher.