User Changes
Ensure an event rule is configured for User changes.
Monitoring changes to users and their states and capabilities will help in identifying changes to the security posture.
Recommended Actions
Configure an event rule for changes to users and their states and capabilities.
Links