Audit entitlement and grant events in PAM

Preview

This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

To keep track of entitlement and grant events, you can view the PAM audit logs.

Before you begin

Make sure you have enabled PAM and set up permissions for it.

View the PAM audit logs using the Google Cloud console

1. Go to the Privileged Access Manager page.

   Go to Privileged Access Manager

2. Select the organization, folder, or project you want to audit entitlement activity in.

3. Click the Audit logs tab.

4. To view details of the audited resource, click an entry in the Action column.

Audit logs are also available in Cloud Audit Logs, and PAM can additionally write to Data Access audit logs if Data Access audit logs are enabled.