How is a cloud account created?¶
A cloud account is created when a person, organisation, administrator or automated process registers an identity with a cloud service.
The creation process may involve an email address, username, telephone number, payment method, invitation, organisational directory or identity provider.
What this means in practice¶
An account may be created by an employer, administrator, reseller or automated onboarding system. A user may accept an invitation rather than complete a full registration process. A third party may create an account using somebody else’s details. In some services, a linked identity from another provider can create the account automatically at first sign-in.
When investigating account origin, identify who controlled the creation process and what evidence exists at each stage. Seek records from the provider, the customer organisation, the identity provider and any linked device where proportionate.
What this may show¶
The account-creation record may include a timestamp, originating IP address, device or browser information, referral source, verification method, payment details and acceptance of terms. The provider may retain some, all or none of these records depending on the service and retention period.
In an organisational environment, the provider may show only that the tenant created the account. The customer organisation may hold better records about who requested it, who approved it, which role it was assigned and when credentials were issued.
What this does not show on its own¶
The dangerous assumption is that the person whose details appear on the account must have personally created it.
What to do next¶
Do not confuse account creation with first use. An account may be created days or months before the user signs in. It may be created but never activated. It may also be created automatically and remain unused.
Key takeaway
Account creation shows how a digital identity entered the service, but you must establish who initiated, approved, activated and later used it.