Tracking user roles added during account creation in the Audit Log

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Is it possible to track the user role applied to a new user upon creation via the Audit log?

Environment

• Carbon Black Cloud Console: Current Version (1.28 and lower)

Cause

Customers looking to audit permissions might need to go back in time to see what account roles a new user started with upon first creation.

Resolution

No, the current version of the Audit Log in Carbon Black Cloud does not create an audit event when a new user role/grant is created upon user creation. This is going to be a feature request for a future version.

Additional Information

Information about user roles and grants are added to the audit log when an account is deleted, but not added.