To keep track of entitlement and grant events, you can view the Privileged Access Manager audit logs.
Before you begin
Make sure you have enabled Privileged Access Manager and set up permissions for it.
View the Privileged Access Manager audit logs using the Google Cloud console
Go to the Privileged Access Manager page.
Select the organization, folder, or project you want to audit entitlement activity in.
Click the Audit logs tab.
To view details of the audited resource, click an entry in the Action column.
Audit logs are also available in Cloud Audit Logs, and Privileged Access Manager can additionally write to Data Access audit logs if Data Access audit logs are enabled.