This issue was also filed as https://github.com/jenkinsci/azure-ad-plugin/issues/575. If Jenkins is using the Microsoft Entra ID security realm, then Jenkins user IDs are Microsoft Entra object IDs, and Jenkins displays something like this:
Nov 10, 2024, 2:51:36 PM
Disconnected by c86d8884-f8f9-443d-b94b-fcdf3b2b066f : adding more RAM and disk
From this, it is not obvious how to contact the user. If the message displayed the user name and/or email address, then that would be easier. Alternatively, the message could link to the "/user/c86d8884-f8f9-443d-b94b-fcdf3b2b066f/" page, which shows the user name and email address.
I'm not sure how read access to those per-user pages is managed, though. AuthorizationStrategy.getAcl(User) (javadoc, source) just calls getRootAcl() by default, and neither AzureAdMatrixAuthorizationStrategy nor GlobalMatrixAuthorizationStrategy overrides that, so I guess the per-user pages will be readable by anyone who has Overall/Read access to Jenkins.
This issue is causing hindrance in automation testing due the reason that multiple teams working with an agent now have no idea who actually has the node/agent offlined and whom to contact.