How to know who’s removing people in the group meeting

Angella May V. Santos 0 Reputation points
2026-10-31T08:40:00.68+00:00

How to know who’s removing people in the group meeting

Microsoft Teams | Microsoft Teams for education | Meetings and calls | Audio and video
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-10-31T08:40:41.83+00:00

    Teams does not provide a standard meeting report or documented audit event that identifies which participant removed someone from an active meeting.

    What can be determined

    • The attendance report shows who attended and their join and leave times, but it does not record who initiated a removal. Organizers and co-organizers can open the past meeting chat, select Attendance, and download the CSV report. ^1^
    • Microsoft Purview audit records can include MeetingParticipantDetail, containing participant IDs and join/leave timestamps. However, Microsoft’s documented Teams audit activities do not list an event that attributes an in-meeting participant removal to another user. ^2^
    • The MemberRemoved audit operation concerns removing members from a team, channel, or group chat. It is not an audit event for ejecting someone from a meeting.

    Therefore, a leave timestamp may establish when the person left, but it does not establish whether they were removed, disconnected, or who performed the removal.

    Prevent it from happening again

    Organizers, co-organizers, and presenters can remove participants; attendees cannot. ^3^

    Restrict presenter permissions before the next meeting:

    1. Open Teams → Calendar.
    2. Select the meeting, then View event.
    3. Select Options.
    4. Under Roles, set Who can present to:
      • Only organizers and co-organizers, or
      • Specific people.
    5. Review Choose co-organizers and retain only trusted users.
    6. Select Save.

    During an active meeting, select People, point to an unnecessary presenter, select More options, and choose Make an attendee. For recurring meetings, changing roles through the calendar’s Options applies to future occurrences; changing a role from the live People panel affects only that occurrence. ^3^

    If removals continue

    Ask the Microsoft 365 or Teams administrator to examine the affected users under:

    Teams admin center → Users → Manage users → select user → Meetings and calls → Completed meetings

    This can help distinguish participant, client, network, device, or service-related disconnections, but the documented diagnostics are not a reliable attribution record for who clicked Remove from meeting. If users explicitly saw “You have been removed” and the issue continues after presenter roles are restricted, the administrator should open a Microsoft 365 support request for backend investigation. ^4^

    References

    1. Manage meeting attendance reports in Microsoft Teams | Microsoft Support
    2. Audit log activities
    3. Roles in Microsoft Teams meetings | Microsoft Support
    4. People from a meeting were being removed multiple times yesterday and had to keep rejoining. what causes this? - Microsoft Q&A
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. JeseminQH 1,130 Reputation points Independent Advisor
    2026-10-31T09:22:09.2766667+00:00

    Hi @Angella May V. Santos

    Unfortunately, Microsoft Teams does not currently provide the meeting organizer or administrator with a standard report that clearly states “User A removed User B from the meeting.” The meeting attendance report can show information such as when a participant joined, left, or rejoined the meeting, but it does not explain whether the participant left voluntarily, lost their connection, or was removed by another participant. It also does not show who performed the removal. 

    The Microsoft Purview audit log records various activities in Microsoft Teams, such as team, channel, and settings changes. However, the available documentation does not list removing a participant from a meeting as an event that can be searched to identify the person responsible. Therefore, checking the attendance report or audit log is unlikely to reveal who removed someone from a previous meeting 

    For more details, please refer to: Search the audit log for events in Microsoft Teams 

    Audit log activities 

    As a preventive measure, I recommend that the meeting organizer review the meeting roles. In Meeting options, set Who can present to Only organizers and co-organizers, or select only trusted individuals as presenters. This is important because presenters can remove participants, whereas attendees cannot. 

    To change this setting: 

    • Open Calendar in Microsoft Teams.
    • Select the affected meeting.
    • Select View event.
    • Open Options or Meeting options.
    • Go to the Roles section.
    • Under Who can present, select one of the following:
      • Only organizers and co-organizers, if no other participant needs presenter permissions.
      • Specific people, if only selected participants should be presenters.
      • User's image
    • Select Apply

    This will not identify who performed a previous removal, but it should help prevent unauthorized participants from removing others in future meetings and all remaining participants should then join as attendees and will not have permission to remove other people from the meeting.

    For more details, please refer to: Roles in Microsoft Teams meetings

    If the meeting is already in progress, the organizer can also open the participant list, select More options next to a participant’s name, and change that person’s role from Presenter to Attendee. The organizer should review the participant list to ensure that presenter access is limited to trusted individuals. 

    Please note that these changes can help prevent the issue in future meetings, but they will not identify who removed a participant from a previous meeting because that specific action is not shown in the currently available meeting reports. 

    I hope this clarifies the current limitation and helps you manage participant permissions more effectively in future meetings 

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.