This message was deleted.

sign in logs on enterprise apps would show you service principal sign ins

Hey John, thanks... it was just an app reg but i had a look in the audit logs of the VDAs / resources that are power managed and I captured the initiator there 🙂